I have a client secret for a third party api which I need to use to sign a JWT using RS256 encryption. I can sign it with HS256 using the secret but RS256 requires a private