Update tokens.md

added `exec()` to the list. no, I'm not joking.