Related to https://stackoverflow.com/questions/57897281/should-oauth2-resource-server-interrogate-userinfo-endpoint-on-authentication-se
