cb2 (BRACE) makes every verifier declare its rules, binds every token to its key, and can make a stolen token useless without the client’s…