Start directly using tokens
Add some insecurity tests
Fix rust-bindgen
Make sure a command token looks like what we expect
Some refactoring
Prepare for allowing known safe values
First attempt at using tokens to detect safety
Refactor names of token types