trivial: Make the AppStream token cache cration threadsafe