Add missing `ALTER TABLE ... ENABLE ROW LEVEL SECURITY;`
Make jwt-secret explicit about 32 characters minimum.