allow external tokens to get own identity