anchor.diff:      @Inject
       @Claim("auth_time")
       private ClaimValue<Optional<Long>> authTime;
  -    @Inject // <5>
  +    @Inject // <6>
       @Claim("custom-missing")
       private ClaimValue<Optional<Long>> custom;
       //
       @Inject
       @Claim(standard = Claims.jti)
       private Provider<String> providerJTI;
  -    @Inject // <6>
  +    @Inject // <7>
       @Claim(standard = Claims.iat)
       private Provider<Long> providerIAT;
       @Inject
  
positive.code: invalid MP-JWT token if any of the following conditions are not met:
  
  1. The JWT must have a JOSE header that indicates the token was signed using the RS256 algorithm.
  1. The JWT must have an iss claim representing the token issuer that maps to an MP-JWT implementation
  container runtime configured value. Any issuer other than those issuers that have been whitelisted
  by the container configuration must be rejected with an HTTP_UNUATHENTICATED(401) error.
  1. The JWT signer must have a public key that that maps to an MP-JWT implementation container runtime
  configured value. Any public key other than those that have been whitelisted by the container
  configuration must be rejected with an HTTP_UNUATHENTICATED(401) error.
  
  
negative.code:     @Inject
      @Claim(standard = Claims.jti)
      private ClaimValue<String> jti;
      @Inject // <3>
      @Claim("jti")
      private ClaimValue<Optional<String>> optJTI;
      @Inject
      @Claim("jti")
      private ClaimValue objJTI;
      @Inject // <4>
      @Claim("aud")
      private ClaimValue<Set<String>> aud;
      @Inject
      @Claim("groups")
      private ClaimValue<Set<String>> groups;
      @Inject // <5>
      @Claim(standard=Claims.iat)
      private ClaimValue<Long> issuedAtCV;
      @Inject
  