Looks good to me. One tiny typo in a comment that I noticed when going
over the diff:
+ * Mark the token as quoted, so it will only be compared literally
+ * and not for some special meaning, such as "all" or a group
+ * membership checks.
should be either:
1. a group membership check
2. group membership checks
Now it's mixed singular and plural.