Encapsulated tokens (encrypted and mac'ed objects)