EncryptionMethod should not be present on 'signing' KeyDescriptor alg: must only appear within an Extensions element