I'm a little unclear on a couple points regarding Application Managed Login (Integration Manual->Authenticate (End-to-End)->Application Managed Login (Recommended)). When the Web Application requests an access token from the Host Platform using the Hyperscale Client Assertion, how is the Host Platform expected to verify the Client Assertion signature?