secure tokens cannot be copied ...