-record(key_decryptor, {
    alg :: gose@jwa:jwe_alg(),
    enc :: gose@jwa:enc(),
    keys :: list(gose@jwk:jwk()),
    options :: gose@jwt:jwt_validation_options()
}).