Should server-side key discovery accept NEXT_PUBLIC_* fallbacks?