Security considerations when importing

Security.

• We can’t let any user access the list of tokens.
• We also can’t let any user import a project if they know the token ID.
• We can’t even let any user refresh a project.