Instead it should pass some token from which the notification id can be recalculated using the trusted origin, similar to what we do for non-persistent notifications, once the persistent notification code is converted to mojo.