Mike has been working on a new design for distributed authorization in the Janssen Project which could enable near real-time JWT token revocation. Revoking JWTs more quickly can limit the blast area of account takeover.