Comment by lmc

It's kinda baffling that JWTs are unencrypted by default, to be fair.