Introducing cookieless authentication beta with App Bridge

Can I get clarity on “dest” in the decoded JWT payload?

will “dest” ALWAYS be the *.myshopify.com account name, or can it be the TLD?

Example:

Domain = myshop.com
Shopify Account = myshop.myshopify.com

In the JWT payload will:

dest = myshop.com
or
dest = myshop.myshopify.com