Currently JsonWebTokenHandler provides one public API to decrypt the token which only uses the keys from TokenValidationParameters provided. Need to add another public API that will also retrieve the keys from the TokenValidationParameters.ConfigurationManager, if no keys are specified in the TVP. This behavior is similar to the other decrypt and signing key validation logic elsewhere.