the pds generates separate, short-lived credentials to use with the appview, and in those credentials the appview is the audience. the appview verifies the credentials with the user's signing key.