make mutable state _pos private in Tokenizer