It seems like it would be hard to enforce that our own deeply-integrated token would be the one a consumer of BrightID uses to incentivize users. Is there another use for the token besides incentives?