diff --git a/go/tokend/tokencache.go b/go/tokend/tokencache.go
index 7cf0254225..8046c396f7 100644
--- a/go/tokend/tokencache.go
+++ b/go/tokend/tokencache.go
@@ -33,6 +33,11 @@ func wrapToken(s *TokenSecret) ttledSecret {
 		ttlBuffer = 2 * time.Minute
 	}
 
+	// DEBUG: debugging some annoying renewal(?) issues with tokend
+	accessor, _ := s.TokenAccessor()
+	ttl, _ := s.TokenTTL()
+	log.Infof("wrapping token accessor %v with token TTL %v", accessor, ttl)
+
 	return ttledSecret{
 		TokenSecret: s,