Ensure existence of JWT claim `key`