Currently https://github.com/fireproof-storage/fireproof/pull/1105 allows all issuers, once we stabilize the list, we should put it in allow-only mode. Also, perhaps the hard coded key support there should be removed