Some takeover require additional conditions to be true on a 3rd party service, for example, an account my have to be deleted before the takeover is possible
for these signatures, some kind of a boolean flag is called for. This will be how upstream modules l like bbot will b e able to know if it should be a finding or vulnerability