OptionaljwksOptionalreplayShared nonce replay store. Defaults to one process-local store per client.
OptionalrevocationKey revocation source. Defaults to one process-local store per client.
OptionalnowClock in epoch seconds.
OptionalresolverSafe discovery/cache tuning for the default seller-pinned JWK resolver.
OptionalfetchFetch capabilities for seller key discovery. The callback must authenticate only to the supplied, already-pinned seller URL and protocol.
Deterministic/custom key source. Defaults to resolveAgent brand.json discovery.