No flag support in WebService calls?

[Michael Thomas]

 Is there a specific reason that flags don't work in the api? Other
than us killing them from the params list via
Bugzilla::WebServices::Util->_delete_bad_keys

If not then the note in the above method and resulting key check seem
to be wrong:

>            # We know that all hash keys passed in to the WebService will
>            # match \w+, so we delete any key that doesn't match that.

Flag field include a '-' causing them to be removed during
Bugzilla::WebServices::Util->taint_data's call to _delete_bad_keys