When non-empty, requires the token's aud claim to contain at least one of these values.
aud
Defaults to an empty set (audience not checked).