User with 'access administration pages' permission can see JWT key config

[kayakr]

Some level of administrator access, e.g. Editor or Moderator roles, may need 'access administration pages' permission (e.g. to see default node and comment administration views, but such a role can also see/change JWT config unless the patch from https://www.drupal.org/project/jwt/issues/2890241#comment-12150674 is applied to add a specific permission for that path.
e.g. similar to

"extra": {
        "enable-patching": true,
        "patches": {
            "drupal/jwt": {
                "Add 'Administer JSON Web Token' permission": "https://www.drupal.org/files/issues/2890241-4-admin-permission.patch"
            }
        },

[dannylamb]

Nice. I'll ask if they can slice a new release, and in the meantime, we can apply that patch or bump jwt to 8.x-dev in https://github.com/Islandora-CLAW/islandora/blob/8.x-1.x/composer.json#L22

[dannylamb]

FYI @kayakr @jonathangreen https://www.drupal.org/project/jwt/issues/3024890#comment-12971964

[kayakr]

@dannylamb Thanks.