This is a tough one to balance. Ideally you want applications to be able to pull new public keys if the private keys are rotated, but equally you’ve now just introduced a path via which an attacker with control of the domain that we’ll known endpoint is hosted on with a path to replace your keys.