P27C0 R04 durable admin authorization bind and trusted-pilot plan prerequisite