Given siopv2, oidvc4vci and oidc4vp: - `iss` and `sub` need to be the same indicating it is self issued - `aud` must contain the DID of the verifier.