I also enjoy not worrying about how the next field I add to my JWT can be exploited after a base64 decode :-)