do not know how to handle choria_provisioning purpose token
Solution: remove the plugin.security.choria.ca setting