like every startup ever in the last startup I worked, all jwt tokens were created from a 10 letter long shared "secret" stored in json config files all over th

like every startup ever in the last startup I worked, all jwt tokens were created from a 10 letter long shared "secret" stored in json config files all over the place :p even dev environments had same key lol