Firebase-admin verifies expired token (Cause of expiration: Change in credentials)

### Environment

I'm using ubuntu 21
Firebase-admin 10.2.0
node v16

#### Steps to reproduce:

1. In the web app, sign in with your firebase user credentials (email/password in my case)
2. Now make a request to your backend API accessing an endpoint that will modify the user's email.
3. After this, the front-end app will indicate that the user needs to reauthenticate with firebase when trying to use the old token to make firebase requests.
4. Yet on the backend application, the front end can still send the old token to my backend API and the `verifyIdToken` method still validates the token and proceeds.

从 verifyIdToken 入口点开始，在所述的 Ubuntu、Node v16 和 Firebase Admin 10.2.0 环境中重现报告的序列。确认用户的电子邮件发生更改后 token 过期的预期行为，然后跟踪相关的身份验证测试或添加回归测试；当旧 token 按照该预期得到一致处理时，即表示完成。

由索引模型根据 Issue 内容生成。