I found the answer, you need to set globally your audience.
1. Create your API with your identifier - "test.app.com"
2. Go to "Tenant Settings" >API Authorization Settings > Default Audience put there "test.app.com"
3. Try to get tokens again, "access_token" should now be JWT not JWE encrypted