i know nonce needs to be a unique value on import, but is token just the token value assigned to my user when tba is enabled for <me>? and signature, which string do i need to encrypt?