[security] finialize token.