How to configure ISAM to create and sign a `private_key_jwt` that is then passed to the Identity Provider (IDP) on the `/token` request when acting as the RP.