Audience: bearer
The anyone-with-the-link audience, whoever can present a secret whose SHA-256 the grant stores.