We want this for full JWT specification compliance (even though the JWT spec indicates this is optional). See:

https://tools.ietf.org/html/rfc7519#section-5.2
https://tools.ietf.org/html/rfc7519#section-7

Scheduling for 1.0 since that's our target 100% compliance target.