We support configuring identity providers at startup and runtime for OIDC. When configuration changes happen at runtime, it is important to ensure that users are now evaluated based on the new configuration for incoming authentication and invalidation of already-authenticated users. A test would go a long way towards verifying this.