Whitelisting jwt and enabling decryption of whitelisted addons

Core changes required for the JWT token PR.
That's a good point. I thought about this a bit more, and I think the difficulty (for me) comes from using the same conditional twice in postfix: X if A && B; Y if A. The previous structure seems better to me.