Throw errors for incorrectly encoded keys

[owencm]

We should ensure to throw an error if the keys are provided in the wrong encoding or type, e.g. a string instead of a buffer, non-URL-safe Base64 etc.

[gauntface]

@owencm was there a particular example where you hit this?

We have some tests on bad input set up, but sounds like we are missing something.