spec for JWT#encrypt