use audience public key instead of private key