JWKS endpoint available at /.well-known/jwks.json