This is basically how nsc creates an operator account + system account + system user really only need to keep track of the seeds, as they can be used to make public/private keys
JWT claims aren't that bad to make, just a lot of options in there basic operation is that:
- you create an operator KP and claims
- operator has a signing KP
- you create an account KP and claims, and sign the account with the operator signing KP
- account has a signing KP