Chooses the key that signs a browser device token: the browser-devices group's ES256 key in a hybrid-groups realm, the dedicated key otherwise. Never a key that signs anything else.
browser-devices
hybrid-groups
the key set; the ambient realm's when absent
{ key, kid, via }, via being group or dedicated
{ key, kid, via }
via
group
dedicated
Chooses the key that signs a browser device token: the
browser-devicesgroup's ES256 key in ahybrid-groupsrealm, the dedicated key otherwise. Never a key that signs anything else.