As part of this release we had 3 issues closed. bugs #316 Add physical token endpoint to audience list for private key JWTs #315 add cache key prefix to avoid cache collisions in the two api resource caches #271 Relax GetOrigin to allow non-http/s URIs