this is required for the next iteration of the specification: https://github.com/biscuit-auth/biscuit/issues/129