1. A method in a data processing system for identifying purpose and behavior of run time security objects, the method comprising: detecting a security object at run time, wherein the security object includes security attributes of a user; examining the security object for a token interface implementation; determining a purpose and behavior of the security object based on the token interface implementation; and handling the security object according to the purpose and behavior of the security object.