Why do you use a leading _ here ? if it's for privacy what about using a suffixing _ one like for our private methods ? If it's for namespace clashing, I may go for a more explicit 'appEnginePiskelToken' instead of '_appEngineToken' so that nobody will wonder what this _ is for.
Your call anyway.