We want to be able to refuse connection for users who have missing claims from a list of required keys.