-record(key_decryptor, {
    alg :: gose:key_encryption_alg(),
    enc :: gose:content_alg(),
    keys :: list(gose:key(binary())),
    options :: gose@jose@jwt:jwt_validation_options()
}).