Sorry for the double post - the following link worked for me after all. If you run into this problem - keep the last post in mind, this seems to only work for machine-to-machine.
The other thing to keep in mind here is that the .NET param really isn’t used and is misleading - HS256 vs RS256 is set at the client level in Auth0.