The aud claim in an IdToken can contain a single string or a list of strings.
The 'schema' claim is removed from the userinfo endpoint request.
Will probably never return so may as well remove them once and for all.