rem’s Twitter Archive—№ 64,273

Brain being lazy here… with a JWT, should I sign it with my own private key, or generate a unique API key for each user, and sign with that?