RP response must not have audience claim