Hi Omer,

I agree this is an unlikely scenario. Bruteforcing will only work if the secret key used is very weak! I have yet to break an encrypted token by brute-forcing, but I have often been able to brute-force passwords and resource IDs!