Checking my understanding. I have a quite complex use case where I need to marry AWS machine identities to service account identities in a different infrastructure. Fine - I think using remote_json and mutating/signing a header will get me there. Thing is, I can't see any practical examples of people writing their own remote_json endpoints, or even the documentation! I can work it out from the source code, but the fact that I have to makes me wonder if I'm simply doing it wrong and I shouldn't be writing my own authorizers