Default signing algorithm wrongly set to HS256 for private_key_jwt. Switched to RS256.
Added phone_number_verified to the phone scope.