The days where payment tokenisation simply provides a tokenised, domain-controlled version of a payment account number appear to be diminishing fast.