Create a new random token for user when requested. Invalidate old ones.
No dependencies set.
The note is not visible to the blocked user.
Create a new random token for user when requested. Invalidate old ones.