restrict ITokenProvider setter