"It is important to know what the token can and cannot do. Otherwise, you could end up churning your wheels in the mud for a while until you realize it is never going to do what you want, and you’d have to move on to a different approach."
It would be nice if the documentation mentions these limitations rather than requiring everyone to search around to figure out why it doesn't work. Two paragraphs would probably save literally hundreds (thousands?) for man hours for the unfortunate IDM developers of the future.