ima: cleanup the match_token policy code