add 'kid' param to sign_with and encrypt_with