I'm by no means an expert, but I wonder if the tokenization could be based off a PKI certificate? If you have the private key, you can edit the script and save changes. If you have the public key, you can run it?