make initiator "tkt" claim structure mirror acceptor (use "jti")