```release-note:improvement
identity: default to RS256 for new workload ids
```
