Expected subject ('sub' attribute of the signed token) which represents the user ID
final String subject;