I think the daily token should be thought of as changing the default SSH port, a simple protection scheme that cuts out casual script kiddie attackers 99% yet d

I think the daily token should be thought of as changing the default SSH port, a simple protection scheme that cuts out casual script kiddie attackers 99% yet does not deter someone who views you/your company as a specific target. The problem with the token would be if it was the sole level of protection (just like simply changing your ssh port is not enough).