The documentation has some sample code for inspecting all sessions for a given user by calling

Session.getAllSessionHandlesForUser(userId)

. I cant find the documentation in how to mergeIntoAccessTokenPayload when all we have is a session handle?