Comment by lyschoening

Maybe the author meant permissions such as 'read-only' or 'read-write' that place additional restrictions on a token.

Anything else would cause a lot of problems. Role permissions might change while a token is still active.