The protected JWS header for the signature. This is a Base64url-encoded JSON object, as per RFC 7515.