Clarify that ``/account/whoami`` should consider application services