depend on base == 4.* (not 4.6.*)
update to draft-ietf-jose-json-web-signature-21
obey hlint