jwt for sub-network