I understand the concern around anonymous identities and want to make sure it's always possible to use them. OIDC is really just the protocol, you don't even a

I understand the concern around anonymous identities and want to make sure it's always possible to use them. OIDC is really just the protocol, you don't even actually need to use email address-based tokens if you don't want to. We actually already support SPIFFE and machine-based identity tokens as well.