Why vct is not selectively disclosable, but vct#integrity is not?

[Sakurann]

Would also be good to add rationale why chosen certain claims are not selectively disclosable.

[Sakurann]

also what about extends and extends#integrity claims?

[danielfett]

Right, vct#integrity should be added/mentioned here: https://drafts.oauth.net/oauth-sd-jwt-vc/draft-ietf-oauth-sd-jwt-vc.html#section-3.2.2.2

extends and extends#integrity are not in the credential, so are not affected.

[bc-pi]

this text is/was about application profiles (like SD-JWT VC) saying what claims the issuer can make selectively disclosable and maybe has text that could serve as inspiration https://www.ietf.org/archive/id/draft-ietf-oauth-selective-disclosure-jwt-12.html#name-selectively-disclosable-val

[bc-pi]

I think I maybe meant for that #258 (comment) to go on #257 but maybe works here too