obfuscate tokens