Could you elaborate on "JSON is not a cryptographer's best friend"? JSON is not a dog, for example, but that doesn't tell much.