[keycloak-dev] Why is the access_token a JWT?