Allow token to access signed package