Could we have leeway included? This makes sense if you are sharing JWT tokens between different services and have not a synced clock.
appleboy
