What are JWT's signed with?

I’m not sure if the rigs intention is to use the passed secret or ignore the passed secret in localmode.