Since it uses the same codepath as regular shares a token is not a secret, if you share a file publicy you have access to the token. The ID can be easily enumerated then. Thus it allows anyone to unshare any share. Not really what we want.  From what I understand this is used to allow remote servers to remove a share? - Right? - If so I'd add another secret only known to the remote server and the local server. 