When I update to any version of the jwt gem > 2.8.2, I randomly and non-deterministically get errors like this when sending out webpushes:

class: WebPush::Unauthorized
host: [fcm.googleapis.com](http://fcm.googleapis.com/), #<Net::HTTPForbidden 403 Forbidden readbody=true>
body:
permission denied: invalid JWT provided

A bunch of changes to jwt claim validators were introduced after version 2.8.2, so I bet the issue has to do with that.

I'm using JRuby 9.4.9.0 (latest version, compatible with Ruby 3.1), and a forked version of this gem that just edits out the commit to use the internal hkdf, to work around the fact that JRuby doesn't support it yet.