. . . "An access token is an object that describes the security context of a process or thread." .