extend it to allow the consumer to provide an

IssuerValidator

or something so that you could provide your own with a whitelist or something? 😕