OIDC sub claim missing from attribute registry

[Cantor, Scott]

To be super clear, the non-deprecated AttributeEncoders are not going anywhere. The registry is just a lot more convenient for standard stuff. Encoders are usually easier for exceptions. I use both.

-- Scott