there are better things to do, like send json that has "alg" twice, each different (one of them "none" ideally) and different implementations handle it differently