-record(key_decryptor, {
    alg :: gose@algorithm:key_encryption_alg(),
    enc :: gose@algorithm:content_alg(),
    keys :: list(gose@key:key(binary())),
    options :: gose@jose@jwt:jwt_validation_options()
}).