make it clear that forward token attribute usage is forbidden currently