tokengroups absorbed into tokenmanager