Tokens, etc
Extend the tokens so that it has a configurable
Expiry Date
List of Security Objects
Restrict from IP
Policy (# of hits, etc)
Extend LoggedInInfo / Security Manager to use security objects from the token
Log calls used by a token, allow users to see how a token is being used.