diff --git a/weed/command/scaffold/security.toml b/weed/command/scaffold/security.toml
index f40f70250..090f4f664 100644
--- a/weed/command/scaffold/security.toml
+++ b/weed/command/scaffold/security.toml
@@ -32,7 +32,7 @@ expires_after_seconds = 10           # seconds
 # - f.e. the S3 API Shim generates the JWT
 # - the Filer server validates the JWT on writing
 # the jwt defaults to expire after 10 seconds.
-[filer_jwt.signing]
+[jwt.filer_signing]
 key = ""
 expires_after_seconds = 10           # seconds
 
@@ -40,7 +40,7 @@ expires_after_seconds = 10           # seconds
 # - f.e. the S3 API Shim generates the JWT
 # - the Filer server validates the JWT on writing
 # the jwt defaults to expire after 10 seconds.
-[filer_jwt.signing.read]
+[jwt.filer_signing.read]
 key = ""
 expires_after_seconds = 10           # seconds