The service trusts the AS, so it knows that only the legitimate user could have created such an authenticator.

• 服务信任AS，因此它知道只有合法的用户才会创建这个验证者。