If your claim is not durable enough for the protocol's expiration setting (e.g. authorization, in some cases), then don't abuse JWTs. Simple!
Makes it really easy to scatter low budget devices across the state that require no Internet connection, and gives a red light/green light on whether you're allowed to go shopping or be out in public that day.
All the infrastructure is right there in place. Didn't get that far.
This time.
Anyway, all of that "infrastructure" is people making judgments. It will enable a police state if the people think they should enable it.
What would the procedure that can guarantee no mistaken passport will ever get signed look like?
Of course you need some form of revocation, otherwise the first bad apple will spoil the system.