The `jwt` and `jwtKeyAttestation` cases/branches in `BindingKey` contain some similar functionality. It might be helpful to refactor this into shared code.