It would be nice to add custom claims before receiving the token from the Auth guard. What do you think?