add support for nested JWS/JWE JWTs