docs: @Sensitive
      public static byte[] decodeLTPAToken(Codec codec, @Sensitive byte[] token_arr) throws SASException {
          byte[] ltpaTokenBytes = null;
  
          try {
              byte[] data = readGSSTokenData(LTPAMech.LTPA_OID.substring(4), token_arr);
              if (data != null) {
                  // Check if it is double-encoded WAS classic token and get the encoded ltpa token bytes
                  if (isGSSToken(LTPAMech.LTPA_OID.substring(4), data)) {
                      data = readGSSTokenData(LTPAMech.LTPA_OID.substring(4), data);
                  }
  
                  Any any = codec.decode_value(data, org.omg.Security.OpaqueHelper.type());
                  ltpaTokenBytes = org.omg.Security.OpaqueHelper.extract(any);
              }
          } catch (Exception ex) {
              // TODO: Modify SASException to take a message?
              throw new SASException(2, ex);
          }
          if (ltpaTokenBytes == null || ltpaTokenBytes.length == 0) {
              throw new SASException(2);
          }
          return ltpaTokenBytes;
      }