Recipient X25519 Private Key (base64url)
Credential ID (base64url)
PRF Salt (base64url)
AAD (base64url, optional)
Key ID (kid)