Preverification API

jwkest doesn't have a license so I don't think we can actually use it anyway

https://github.com/rohe/pyjwkest

It does have a rsa_load method so that's a definite maybe, but I'd have to research and test more for that.