Currently, the UpdateUserPermissionsHandler updates only the user permissions, it should update all security tokens too.