This sounds like the [only?] intelligent (and also unintendend?) use case for JWT