if order of claims changes, frontend should detect it so the user money is not wasted

[nanaknihal]

the sandwich requires topbread and bottombread to have certain field names. They must have different field names, otherwise it would be insecure:

bottombread = '"sub":'
topbread = '", '

is insecure as bottombread can be put anywhere and the user can include other parts of jwt in their credentials

Topbread must have a different credential

But that requires a specific claim always coming directly after sub. The frontend should detect when this is not the case (e.g. server changed the JWT format) and prevent the user from submitting even the proof