[Security] use access decision manager to control which token to vote on#20388