Hmm, interesting point.  I guess we could mark tokens as "used" rather than actually deleting them if we think this error code it useful, but maybe too much effort for too little payoff.

Would it be bad to have an "unrecognised token" error code?  It sounds useful, but smells like one of those potential crypto info-leak footguns I'm always reading about...