`private` methods should generally not be tested directly. Instead they should be tested through the public interface. So maybe above in `#before_create` instead of stubbing `generate_token_value`, we can stub `ActiveSupport::SecureRandom.hex`.