Update core dependency, implement private tokens and safe expansion

- Update to latest LTS for core dependency
- Implement ability for plugins to provide "private" tokens to be replaced
- Implement ability for expansion to continue even if a token is not recognized.