chmod the token_file after creation

Set the permissions of the token file to 0400 so that only the owner can read the tokens.
Otherwise, any other system user could assume a default ~/.boxfs/ path and read in the user's tokens, thereby gaining access to that user's Box files and possibly account.