Comment by danappelxx

How does this approach practically differ from using short-lived JWTs+TLS?