Audit token for font sandbox extension is sometimes wrong