If a JWT is presented with an `aud` claim, the JWT decoding will throw an error if the `ALLOWED_JWT_AUDIENCES` is blank.