[keycloak-user] Motivation behind the removal of client_id from "aud" in the JWT