Say what the be/bs virtual auth flags actually do

index.bs

@@ -7765,9 +7765,13 @@ Each stored [=virtual authenticator=] has the following properties:
 
     Note: This property has no effect if the [=Virtual Authenticator=] does not support the [=User Verification Method=] extension.
 : |defaultBackupEligibility|
-:: Determines the default state of the [=backup eligibility=] [=flag=] ([=BE=]) for any newly created [=Public Key Credential Source=].
+:: Determines the default state of the [=backup eligibility=] [=credential property=] for any newly created [=Public Key Credential Source=].
+    This value MUST be reflected by the [=BE=] [=authenticator data=] [=flag=] when performing an [=authenticatorMakeCredential=]
+    operation with this [=virtual authenticator=].
 : |defaultBackupState|
-:: Determines the default state of the [=backup state=] [=flag=] ([=BS=]) for any newly created [=Public Key Credential Source=].
+:: Determines the default state of the [=backup state=] [=credential property=] for any newly created [=Public Key Credential Source=].
+    This value MUST be reflected by the [=BS=] [=authenticator data=] [=flag=] when performing an [=authenticatorMakeCredential=]
+    operation with this [=virtual authenticator=].
 
 ## <dfn>Add Virtual Authenticator</dfn> ## {#sctn-automation-add-virtual-authenticator}
 
@@ -8011,6 +8015,8 @@ The <dfn>Credential Parameters</dfn> is a JSON [=Object=] passed to the [=remote
                 <td>
                     The simulated [=backup eligibility=] for the [=public key credential source=]. If unset, the value will default to the
                     [=virtual authenticator=]'s |defaultBackupEligibility| property.
+                    This value MUST be reflected by the [=BE=] [=authenticator data=] [=flag=] when performing an [=authenticatorGetAssertion=]
+                    operation with this [=public key credential source=].
                 </td>
                 <td>boolean</td>
             </tr>
@@ -8019,6 +8025,8 @@ The <dfn>Credential Parameters</dfn> is a JSON [=Object=] passed to the [=remote
                 <td>
                     The simulated [=backup state=] for the [=public key credential source=]. If unset, the value will default to the
                     [=virtual authenticator=]'s |defaultBackupState| property.
+                    This value MUST be reflected by the [=BS=] [=authenticator data=] [=flag=] when performing an [=authenticatorGetAssertion=]
+                    operation with this [=public key credential source=].
                 </td>
                 <td>boolean</td>
             </tr>
@@ -8074,8 +8082,8 @@ The [=remote end steps=] are:
     :: |rpId|
     : [=public key credential source/userHandle=]
     :: |userHandle|
- 1. Set |credential|'s [=backup eligibility=] [=credential property=] to |backupEligibility|.
- 1. Set |credential|'s [=backup state=] [=credential property=] to |backupState|.
+ 1. Set the |credential|'s [=backup eligibility=] [=credential property=] to |backupEligibility|.
+ 1. Set the |credential|'s [=backup state=] [=credential property=] to |backupState|.
  1. Associate a [=signature counter=] |counter| to the |credential| with a starting value equal to the |parameters|'
      |signCount| or `0` if |signCount| is `null`.
  1. If |largeBlob| is not `null`, set the [=large, per-credential blob=] associated to the |credential| to |largeBlob|.