I will post the first example of how NOT to use the new token substitution feature:

runnas "<p1>" /user:admin /pass:xxx /tok:file.tok