Under section 5.10 there is the following:
If the Wallet requires the Verifier to encrypt the Request Object, it SHOULD use the jwks parameter within the wallet_metadata parameter to pass public encryption keys.
I have the impression that using jwks is not enough, because Verifier doesn't know which encryption method to use.
Perhaps there need to be either
request_object_signing_alg_values_supported and request_object_encryption_enc_values_supported as defined in JAR, or
request_object_encryption_enc_values_supported provided that all jwks elements contain alg.