JWT token resolution mechanism must have retryable exception type so that client could distinguish whether this is: - connect error to JWKS URI - JWKS URI request timeout to - "kid" temporarly not found on JWKS URI