getUserInfoExtended

Not consuming: one access token may authorize several credential requests, so the entry has to survive until it expires with the map store (the token's own exp bounds it anyway).