Looks good to me. One tiny typo in a comment that I noticed when going over the diff:
+ * Mark the token as quoted, so it will only be compared literally + * and not for some special meaning, such as "all" or a group + * membership checks. should be either: 1. a group membership check 2. group membership checks Now it's mixed singular and plural.