-record(password_decryptor, {
    alg :: gose@jwa:pbes2_alg(),
    enc :: gose@jwa:enc(),
    password :: binary(),
    options :: gose@jwt:jwt_validation_options()
}).