Whitelisting jwt and enabling decryption of whitelisted addons

Core changes required for the JWT token PR.