Parse raw and return the Ticket subclass whose service name matches the JWT's data.service claim. Throws InvalidTicketError for unknown services or malformed payloads.
data.service