Requires the token's iss claim to match issuer.
iss
Tokens with a different or absent issuer are rejected.