Container aware token controller