[security] allow set any details to token.