support nested keys in identity reference