> not only was I no longer able to mint my own API tokens, the legitimate ones I’d initially generated still worked can someone explain what's meant by this? i

> not only was I no longer able to mint my own API tokens, the legitimate ones I’d initially generated still worked can someone explain what's meant by this? i presume the private key identified by the author still works, but will stop working after 7 days? (based on the sample JWT in the first section, the expiry time of the token seems to be 7 days)