Amir Omidi

> The initial client request is done with a jwk pair, and the client is expected to put its public fingerprint at the http token url as well. If we...

Honestly, I think if this is scoped to a single TCP connection, and new TCP connections would have to full restart the flow, you'd solve the majority of my concerns...

> I think that is currently true with spire's currnent plugin model? Anyone we can have double check that assumption? If so then I think the initial proposal wouldn't create...

I think this is breaking using a configuration file for `errcheck`. Passing: ```json { "_base": { "description": "Base config that all subsequent analyzers, even unspecified will inherit." }, "errcheck": {...