do not allow `id`. always use SSA token. but please file an issue for an admin to be able to look it up.