How does this work? Is it locking the token to the npub or is it using the npun as a receive address?