I would still like to name it process token to not confuse it  with user impersonation token... which is already called token.