Fetch JWK set from identity provider; eliminates need to configure public key for signature verification.