Is there really no way of getting "Protected" visibility in golang?

Why would the code be a complete mess with two functions, both relating to tokens? At any rate, I think you’re looking for internal packages:

You can create reusable packages and export functions that can be imported by your package but nowhere else.