pub fn sign<T>( claims: &T, key_b64: &SecretString, ) -> Result<SecretString, AuthenticationError>where T: Serialize,
Returns an error when the key cannot be decoded or the claims cannot be serialized.