Currently the output of srtool does not match the expected output because of a missing boolean flag for the parachainSystem.authorizeUpgrade call. This was fixed and released in subwasm v0.21.0. I don't see the dependency being included in any srtool releases so far. Would it be possible to have it backported to the last couple of srtool releases?