Function verify_claims 

pub(super) fn verify_claims<T: DeserializeOwned>(
    token: &SecretString,
    key: &SecretSlice<u8>,
) -> Result<T, AuthenticationError>

Applies the same JWT policy as verify with a decoded signing key.