The token can be locked to a pubkey which makes sure only the receiver can spend it.