| claims             | key-value pairs                         | Claims to be associated with the requested credentials |

The keys "exp", "parent" and "sub" in the `claims` object are reserved and if present are ignored by MinIO.

| iat        | _integer_      | The token issue time.                                                                                                                                                                   |
| exp        | _integer_      | The token expiration time.                                                                                                                                                              |