Offer a storage server that requires tokens as a parameter.
Don't implement the crypto. That comes later.