use references (even though my co-author doesn't like them)
removing JWK-set for just fingerprints