Give each cargo node its own datum token

Central issues each cargo node its own Datum token from a signed machine token, replacing the shared token.