Rule to add user email to access token?

Hi, I found a few posts on this topic already, but I can’t seem to get this to work. I have a custom rule to add user.email to the access token instead of fetching this information from userinfo. The rule looks like this:

function (user, context, callback) {
    context.accessToken["https://MY_DOMAIN_DOT_COM/claims/email"] = user.email;
    return callback(null, user, context);
}

Yet still, I see nothing in the access token. Any ideas?