anchor.diff:  %%--------------------------------------------------------------------
   -spec operation_supported(entity_logic:operation(), entity_logic:aspect(),
       entity_logic:scope()) -> boolean().
  +operation_supported(create, preauthorize, public) -> true;
  +operation_supported(create, verify_identity, public) -> true;
  +
   operation_supported(create, {user_named_token, _}, private) -> true;
   operation_supported(create, {provider_named_token, _}, private) -> true;
   operation_supported(create, {user_temporary_token, _}, private) -> true;
  
positive.code: %% @end
  %%--------------------------------------------------------------------
  -spec validate(entity_logic:req()) -> entity_logic:validity_verificator().
  validate(#el_req{operation = create, gri = #gri{aspect = {user_named_token, UserId}}}) ->
      ?NAMED_TOKEN_VALIDATOR(?SUB(user, UserId));
  validate(#el_req{operation = create, gri = #gri{aspect = {provider_named_token, ProviderId}}}) ->
  
negative.code: %%--------------------------------------------------------------------
  -spec authorize(entity_logic:req(), entity_logic:entity()) -> boolean().
  % Users and providers are authorized to perform all operations on their tokens
  authorize(#el_req{operation = create, gri = #gri{aspect = preauthorize}}, _) ->
      true;
  authorize(#el_req{operation = create, gri = #gri{aspect = verify_identity}}, _) ->
      true;
  
  authorize(#el_req{auth = ?USER(UserId), gri = #gri{aspect = {user_named_tokens, UserId}}}, _) ->
      true;
  authorize(#el_req{auth = ?USER(UserId), gri = #gri{aspect = {user_named_token, UserId}}}, _) ->
  