JWS verification error on account deactivation preceded by key rollover

Thanks for the second tag. I had seen this but it had fallen back off my radar. I think you're right that there's a cache invalidation issue here. We'll have to think about how best to solve it.