Extract token security into base class