JWT token + Policy

[zaid]

@Marcos-Oleiro you do not need a policy to create a key. All you need is an API