Token operations should not lock namespace

Token get/renew/cancel operations obtain a write lock on the namespace. This seems unnecessary.