or is there a smaller part of the filesystem that's appropriate? it looks like at least the immediate parent directory for the token isn't writable either.