Comment by mosdave

I, for one, enjoy not needing to coordinate an encryption key between my service and my IdP.