what am I missing? a JWT signature is the header and payload encrypted and attached. You would do that encryption via a private key, said public key would be

what am I missing? a JWT signature is the header and payload encrypted and attached. You would do that encryption via a private key, said public key would be used to verify it was encrypted by the private key. What does "to SIGN" mean in this context?