MDS entry containing authenticator metadata and trust anchors.
Optional AAGUID identifier from MDS metadata.
PEM-encoded attestation roots.