If a user wishes to use a custom OIDC client such as keycloak, alongside their own ClientID, signing will fail as the audience value is hardcoded to 'sigstore'.

This prevents custom OIDC usage