This made me curious as well, so I took a look at the source. Not seeing a token or handshake. Looks like on macOS and Linux it listens on a unix socket in the profile chmod'd 0600, and one Windows it's a randomly named pipe with the name written into the profile folder.