Private JWK (for serialisation / persistence).
CryptoKey for signing (private).
Public JWK for inclusion in JWKS endpoint.
CryptoKey for verification (public).
Private JWK (for serialisation / persistence).