Whitelisting jwt and enabling decryption of whitelisted addons

Core changes required for the JWT token PR.
I was following the pattern of lines 123 and 124? I don't mind to change but probably should be a global thing.