docs: private Map<String, TSSASMechConfig> extractASMech(Map<String, Object> authenticationLayerProperties) {
          Map<String, TSSASMechConfig> tssasMechConfigs = new LinkedHashMap<String, TSSASMechConfig>();
          List<String> configuredMechanisms = new ArrayList<String>();
  
          String establishTrustInClient = (String) authenticationLayerProperties.get(KEY_ESTABLISH_TRUST_IN_CLIENT);
          boolean required = false;
          if (OPTION_REQUIRED.equals(establishTrustInClient)) {
              required = true;
          } else if (OPTION_NEVER.equals(establishTrustInClient)) {
              Tr.warning(tc, "CSIv2_COMMON_AUTH_LAYER_DISABLED", establishTrustInClient);
              tssasMechConfigs.put(TSSNULLASMechConfig.NULL_OID, new TSSNULLASMechConfig());
              return tssasMechConfigs;
          }
  
          List<String> mechanisms = getAsMechanisms(authenticationLayerProperties);
          if (mechanisms.isEmpty()) {
              Tr.warning(tc, "CSIv2_SERVER_AUTH_MECHANISMS_NULL");
              tssasMechConfigs.put(TSSNULLASMechConfig.NULL_OID, new TSSNULLASMechConfig());
          } else {
              for (String mech : mechanisms) {
                  if (!configuredMechanisms.contains(mech.toUpperCase())) {
                      if (mech.equalsIgnoreCase(AUTHENTICATION_MECHANISM_LTPA)) {
                          tssasMechConfigs.put(ServerLTPAMechConfig.LTPA_OID, new ServerLTPAMechConfig(authenticator, tokenManager, targetName, required));
                      } else if (mech.equalsIgnoreCase(AUTHENTICATION_MECHANISM_GSSUP)) {
                          tssasMechConfigs.put(GSSUPMechOID.value, new TSSGSSUPMechConfig(authenticator, targetName, required));
                      } else {
                          Tr.warning(tc, "CSIv2_SERVER_AUTH_MECHANISM_INVALID", mech);
                      }
                      configuredMechanisms.add(mech.toUpperCase());
                  }
              }
              if (tssasMechConfigs.isEmpty()) {
                  tssasMechConfigs.put(TSSNULLASMechConfig.NULL_OID, new TSSNULLASMechConfig());
              }
          }
  
          return tssasMechConfigs;
      }