afs-supervisor: Enforce session check (for token)