一个正模拟客户端的线程拥有一个主令牌和一个模拟令牌。

A thread that is impersonating a client has both a primary token and an impersonation token.

youdao

默认情况下，系统用主令牌当一个进程的线程与一个安全对象相互作用时。

By default, the system USES the primary token when a thread of the process interacts with a securable object.

youdao

这样做的原因是因为WS - Security规范允许为身份验证附加多个令牌，这样就需要更多的元数据来识别哪一个是主安全令牌。

You need to do this because the WS-Security specification allows attaching multiple tokens for authentication, thus additional metadata is required to identify which is the primary security token.

youdao