new token-permissions model, and compositor filters paint messages based on id