Yes, that's the thing that we're still hashing out. Tokens can be locked to a recipient and have a timelock, like an HTLC.