AFAIK there are NO tests for this, and adds #3673 even more tests to JWT tokens, making the disparity larger.

Legacy tokens are supposed to be removed, hence the (Maybe) in the title. Not sure when this is supposed to happen, but if it sticks around for a while then some tests would prob be smart and it wont take too much time.

Tests can probably be largely copied from the equivalent JWT tests