JWKs endpoint is now publicly accessible