token arrays, next step revoke