OptionalcacheOptionalcooldownMinimum interval between fetch attempts (default 30s).
OptionalfetchFetch implementation to use instead of the global fetch. Whatever it
throws reaches the caller unchanged, so a failure in your own transport
stays distinguishable from a Lacewing refusal; only a failure of the
global fetch becomes a JWKS_FETCH_FAILED error.
OptionalstaleHow long previously-good keys may keep serving once the endpoint starts
failing (default 3600s). Bounded on purpose: a key rotated out because
it was compromised must not stay trusted for as long as an attacker can
keep the endpoint unreachable. 0 disables stale serving entirely.
OptionaltimeoutFetch timeout (default 5000ms).
Cache lifetime when the response has no usable Cache-Control (default 300s).