Double key tokens

[pes10k]

It would add some extra zip to the privacy angle here if tokens could be double keyed under the top level and frame domain, and it would satisfy most use cases. What would you think of an amendment to the proposal to double key all tokens?

[michael-oneill]

Double keying in general is good for privacy, so I would vote yes - as long as the quid pro quo wasn't to raise the default duration. If a subresource can only use a token for an hour I don't think double keying adds much from a privacy POV.