anchor.diff:      @Inject
       @Claim("auth_time")
       private ClaimValue<Optional<Long>> authTime;
  -    @Inject // <7>
  +    @Inject // <5>
       @Claim("custom-missing")
       private ClaimValue<Optional<Long>> custom;
       //
       @Inject
       @Claim(standard = Claims.jti)
       private Instance<String> providerJTI;
  -    @Inject // <8>
  +    @Inject // <6>
       @Claim(standard = Claims.iat)
       private Instance<Long> providerIAT;
       @Inject
  
positive.code:     raw_token("MP-JWT specific original bearer token", String.class),
  
      // The IANA registered, but MP-JWT optional claims
      nbf("Not Before", Long.class),
      auth_time("Time when the authentication occurred", Long.class),
      updated_at("Time the information was last updated", Long.class),
  
negative.code:     }
  
      /**
       * The aud(Audience) claim identifies the recipients that the JWT is
       * intended for.
       * @return the aud claim.
       */
      default Set<String> getAudience() {
          return getClaim(Claims.aud.name());
      }
  
      /**
       * The sub(Subject) claim identifies the principal that is the subject of
       * the JWT. This is the token issuing
       * IDP subject, not the
  