request JWKs from issuer during config