TicketFlags encoding

[Frank Cusack]

Another encoding question.

KerberosFlags ::= BIT STRING (SIZE (32..MAX))
    -- minimum number of bits shall be sent,
    -- but no fewer than 32

and

TicketFlags ::= KerberosFlags
    -- reserved(0),
    -- forwardable(1),
...
    -- ok-as-delegate(13)

What would be the correct DER encoding of the Forwardable flag, by itself?
Without the 32 bit minimum, I'm confused as to which of these would be
correct:

03 02 06 40
03 03 03 40 00

With the 32 bit minimum, I'm confused as to which of these is correct:

03 05 1E 40 00 00 00
03 05 13 40 00 00 00
03 05 00 40 00 00 00

Or, something different?  Do I have the bit ordering correct?  (bit 0 =
leading/most significant)