Comment by grncdr

If, like me, you had no idea what this was from reading the release announcement:

Biscuit is an authorization token with decentralized verification, offline attenuation and strong security policy enforcement based on a logic language.

- https://www.biscuitsec.org/

Seems like an elegant replacement for use cases where people commonly reach for JWTs.