title: How and when to create a new JwtConsumerBuilder when keys in the HttpsJwks cache have gone stale
body: <p>This question is in regards to the jose4j JWT library.  I am planning to create a single <code>JwtConsumerBuilder</code> instance for processing all incoming requests.  I read here on stackoverflow and in release notes that JwtConsumerBuilder is multi-thread safe.  I also plan to use the  <code>setVerificationKey</code> method to validate the signature.  When the key expires, I assume I will get an exception.  Which type of exception will be returned: <code>InvalidJwtSignatureException</code> or <code>InvalidKeyException</code>?</p>
  
  <p>When such an exception occurs, my plan is to update my global instance of the JwtConsumerBuilder with a new instance after retrieving the updated key through the class <code>HttpsJwksVerificationKeyResolver</code>.  Is this a sound approach or does the resolver take care of this for me.  </p>