whether to validate the aud header in the jwt contains the client id.
aud
final bool validateAudience;