ByteStash matches users on issuer + sub only, so the existing user row was remapped to the Pocket ID user before this was deployed. The old Authentik credentials stay in the vault for rollback. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>