You should have more than a single threat in your threat model. In addition to counterfeit tokens you may want to take a look at theft of tokens either during

You should have more than a single threat in your threat model. In addition to counterfeit tokens you may want to take a look at theft of tokens either during or between elections.