@spec fetch_public_key(realm :: String.t()) ::
  {:ok, public_key_pem :: String.t()} | {:error, reason :: term()}