http://yossale.com/posts/asymmetric-jwt-signing-using-aws-kms/