To mitigate issues like this one at cloudish.ai, we built the service splitting the OIDC functionality (really all the user / human features) from the core API Key management (agent features). I'd argue this is a better model than having a single control plane that manages everything.