Do they require the watermark to be a unique token that can be associated with PII?