Hello John, those are some very interesting connection tests you've done there. Thanks! I'll convey it back to the team.
On the token front, if I understand you right, you are referring to token based access control, where each token has rules on objects, right?