To use version 4 of lcobucci/jwt, we needed to init the new Configuration object. At the moment, this is instantiated locally but it would be good if we could inject this as a dependency. Unfortunately this creates a breaking change so needs to be held out for v9.