Oh, good question. Text, I think. The goal is that the token can be used in a template without worrying about what charset is used for the HTTP response.