As such, we merely borrow principles of a JWT (signing and stateless verification). You can think of them as signed payload instead of a typical JWT