* @param recipient name of assertion recipient (implicit audience)
* @param audiences additional audience values
* @param ts timestamp to evaluate assertion conditions, or 0 to bypass check
* @param recipient name of assertion recipient (implicit audience)
* @param audiences additional audience values
* @param ts timestamp to evaluate assertion conditions, or 0 to bypass check