What are JWT's signed with?

Extensions
18

Okay, so the expected behavior for local mode is to ignore the passed secret.

Would be useful if I open a PR in order to ignore the parameter?