JWKS uses base64-encoded n,e params for RSA keys