This may already be supported and I'm just missing it, but can the reverse proxy currently be used to just verify signatures on unencrypted JWTs? I'd like to use this project with a private-key only HMAC+SHA256 JWT system, but it seems that the project may only work with public-key-encrypted tokens.