Ability to 'obtain' the access_token JWT within a rule?