I am currently using JWKS to verify the token. In the KVM I have the JWKS key stored and in the flow I am doing lookup of the key. The JWT token is getting signature verified against the JWKS key, if its successful then the request is processed further.