jwtTokenManager does not add account properties other than roles

The jwtTokenManager returns the account as a PwdCredentialAccount even if the MongoRealmAuthenticator or FileRealmAuthenticator are used.

These authenticators are able to hold more account properties that can be used in the ACL permissions.

Expected Behavior

ThejwtTokenManager should be configurable add selected properties to the signed token.

ThejwtTokenManager returns the account as a PwdCredentialAccount. This does not allow storing additional properties.

If the ACL uses a predicate on a user property, such as:

{ "mongo": {
  "readFilter": { "tenants": { "_$exists": true, "$in": "@user.tenants"  }  }
}

The predicate will fail because the property tenants is not available.

affected version: RESTHeart 7.1