basic signing support. supports headers and claims but fails with ES256 right now, not sure why
draft
2017-02-07, Gary Kramlich