This is somewhat orthogonal to the security goals I'm trying to tackle, but still very relevant to the ecosystem that currently uses JWT. So I've opened an iss

This is somewhat orthogonal to the security goals I'm trying to tackle, but still very relevant to the ecosystem that currently uses JWT. So I've opened an issue to address it before v1.0.0 is tagged: https://github.com/paragonie/past/issues/14 https://github.com/paragonie/past/issues/14