[HttpKernel] truncate profiler token to 6 chars (see #7665)