We are trying to propagate a Bearer token to a trusted page with a different host name. Currently I do not see a mechanism how to achieve that. Exposing the "crossorigin" attribute may implement a simple solution. Any ideas?