Problem Description:
If the JWT key setting is changed any active tokens immediately become invalidated. We should think of a way to keep X number of old keys and allow the service_lib to validate a non-expired token against an older key.

User Story

Supporting documentation