The [`OneKey(PublicKey, PrivateKey)` constructor](https://github.com/cose-wg/COSE-JAVA/blob/master/src/main/java/COSE/OneKey.java#L68) does not consistently set the `algorithm (3)` key in the resulting map. This causes the resulting CBOR object to violate specs such as [the WebAuthn spec](https://www.w3.org/TR/webauthn/#attested-credential-data), and is just generally poor practice. (The exception are EDDSA keys, which set the key.)