API to check JWT sigs (bug 908873)