replace deprecated `/-/jkws` endpoint for server keys