Quick question, I see you can use Oathkeeper to generate JWKS, but out of curiosity, how do you supply the private key for JWT signing using this method? I might be a bit stupid here because I'm not entirely sure how this works, I thought JWKS was only the public key

did you happen to figure out how to get access to this private key?

nope