Thanks for your and your team’s investigation.
Considering the difficulties of investigation, we shifted our team’s development plan not using this credentials. We will not be pursuing this invalid_signature issue any further.
To avoid unnecessary churn, please close this thread. We appreciate your help and may reach out again if our direction changes.