Maybe we should call this a 'registration token'.