The issue is that each machine/service instance needs to have its own key, but I'd like to be able to attach additional metadata (roles, etc.) in the same way I'd do with the user schema. The only thing I saw that would allow this was "metadata", but it doesn't seem to be returned by the

/userinfo

endpoint, which is itself the only endpoint I've found that will return any info from an access token (

ory_at_XYZ

) to be useful with the oathkeeper auth/mutation.