Currently when creating an Authority it does not pass any of the options from Extended Key Usage to vault. More specifically it does not take the values for Server Authentication or Client Authentication, and uses the vaults default values. Currently this is an Authority with both Server and Client.
The ability to create authorities with either server or client, or both would be nice.