rename JWK's alg to kty
when unknown algorithm value given, raise UnexpectedAlgorithm intead of InvalidFormat
shortcut for reserved header keys
JWE first cut (only RSA-OAEP A256GCM encryption)