The token created for IDN origins is not punycoded. I think that this means the tokens won't be usable on those origins.

./generate_token.py 'https://Ћoogle.com' WebBluetooth
Token details:
 Origin: https://Ћoogle.com:443
 Feature: WebBluetooth
 Expiry: 1483985994 (2017-01-09 18:19:54 UTC)

AuIwE2BMpGu7yTLUicbx21ZfbqC/rnIj1ef9BOj/pGvSeW6Ik0RjM/WbJq1X236BgJnalrv/B+Ox2uad+Z3LIQQAAABVeyJvcmlnaW4iOiJodHRwczovL1x1MDQwYm9vZ2xlLmNvbTo0NDMiLCJmZWF0dXJlIjoiV2ViQmx1ZXRvb3RoIiwiZXhwaXJ5IjoxNDgzOTg1OTk0fQ==

The payload portion of that token is the following:
{"origin":"https://\u040boogle.com:443","feature":"WebBluetooth","expiry":1483985994}

Another case is when the origin doesn't have the scheme. This is what happens:
./generate_token.py 'Ћoogle.com' WebBluetooth
generate_token.py: error: argument origin: Ћoogle.com is not a hostname or a URL