[keycloak-user] Not before policy in accesstoken uses dash-separator (in json), why?