opentf-ctl generate token only allows for iss and sub payload elements.
opentf-ctl generate token
iss
sub
Allowing for exp would be nice (no expiration date by default).
exp