You only should be using Unknown when you've failed to collected some info during the process due to a timeout or something. Your get_session_tokens method doesn't really turn that type of info, so all you can do is flag it Safe here.