pub fn record_token<Id>(
    ig: &mut InstanceGuard<'_>,
    iad: InstanceAccessDetails<Id>
) -> Result<RawToken, Fatal> where
    Id: AccessId