Oathkeeper + Keto question here - I'm having an invalid rule configuration when trying to use

remote_json

Oathkeeper config:

...
    authorizers:
      allow:
        enabled: true
      deny:
        enabled: true
      remote_json:
        enabled: true
        config:
          remote: <http://srv-access-control-keto-read.platform>-$ENV.svc.cluster.local:80/check
          # <https://github.com/ory/oathkeeper/issues/797>
          forward_response_headers_to_upstream: []
          payload: |
            {
              "subject": "{{ print .Subject }}",
              "resource": "{{ printIndex .MatchContext.RegexpCaptureGroups 0 }}"
            }
...

This renders correctly, pulled straight from an example on github Access Rule config:

...
  authorizer:
    handler: remote_json
    config:
      payload: |
        {
          "namespace": "foo",
          "object": "bar",
          "relation": "admin"
        }
...

Yet the oathkeeper maester tells me the configuration for

remote_json

is invalid and my access rule doesn't work. It works fine if I set the authorizer to

allow

or

deny

, etc