Replace old JWT message protection with IDataProtector