DFS: A procedure that is registered with a token to be called automatically if the token is revoked. The act of revoking a token is also referred to as a callback.