Damn you!  I already lifted this out a little, and identified it as a smell.  I was thinking about this as I was following asleep and it's very close to the authenticator's "token type".  Will lift.