It's highly unlikely, but it's possible 2 owners could get the same token. The application has to enforce the uniqueness of this token somehow.