Yeah I'd like to basically keep the building of the user type always simple: same type, and ID is built from JWT iss and sub claims.