But I'm not joking, this would probably be a good use for a JWT in a QR code