OIDC-187 added support for id_token_hint but it always sends the clear version, would be better to send the one we got from the provider as is.