chore(security): Improve security docs and tighten JWT audience

chore(security): Improve security docs and tighten JWT audience #760