why `one_for_all`. aren't the two processes pretty independent (NOTE: haven't looked much at token manager yet, so let me know if I'm way off)