Comment by senko

Don't use JWT: https://fly.io/blog/api-tokens-a-tedious-survey/ (by @tptacek)