refs: strip out not allowed flags from ref_transaction_update