I'm using the validate-jwt policy in APIM. As a part of the verification, I want to confirm that t