Great point, but I was concerned more about Injection issues with JWTs and hence the classification :)

But I like your idea too!

Thanks for sharing it.