anchor.diff:      raw_token("MP-JWT specific original bearer token", String.class),
   
       // The IANA registered, but MP-JWT optional claims
  +    aud("Audience", Set.class),
       nbf("Not Before", Long.class),
       auth_time("Time when the authentication occurred", Long.class),
       updated_at("Time the information was last updated", Long.class),
  
positive.code:     }
  
      /**
       * The sub(Subject) claim identifies the principal that is the subject of
       * the JWT. This is the token issuing
       * IDP subject, not the
  
negative.code:     @Inject
      @Claim("auth_time")
      private ClaimValue<Optional<Long>> authTime;
      @Inject // <5>
      @Claim("custom-missing")
      private ClaimValue<Optional<Long>> custom;
      //
      @Inject
      @Claim(standard = Claims.jti)
      private Instance<String> providerJTI;
      @Inject // <6>
      @Claim(standard = Claims.iat)
      private Instance<Long> providerIAT;
      @Inject
  