permit setting of token directly