How to handle open approvals on the TokenHandler

[doerfli]

It would be good from a security perspective that open (unlimited) approvals to the token handler, specifically from users, cannot be consumed without the user being the actor instatiating that action.

• Add the concept of pending TokenTransfer to improve token transaction security #523