If isBadUP is set, overrides the UP bit in the flags in the authenticator response to be zero. Defaults to false.