The key access tokens are bound to; it signs silently, on every request to the issuer.
The purpose as the Go side names it.