add a simple test
use ssh-key-to-pem instead of the util from http-signature
tests for error cases
catch decoding error, and emit it safely
0.0.2