==================
- Add ability to configure a fixed list of JWT access token keys,
by passing them as an argument to `oauth.Client()` rather than
fetching them at runtime from the server.
- Fix verification of JWT access token `typ` header.
(Thankfully it was failing closed rather than failing open).
- Fix verification of `scope` list obtained from a JWT access token.
(Thankfully it was failing closed rather than failing open).