In invirt.authz.locker, deal with getting tokens and