The text described the empty flag as "the one the management server publishes"
and stopped there, so a reader had no way to know what happens when it publishes
none. Name the fallback, and scope the root requirement to a host other than
NetBird's rather than to setting the flag at all.
Reported by cubic on #7514.