2020-01-16 UTC
# 
[dmitshur] and I think the prefix rule can be simplified to just inequality. if the returned "me" value is different, then it should be confirmed that if used for authorization discovery, it reports the same authz endpoint.