Determining why tokenauth'ed URLs aren't providing expected info

I am trying to troubleshoot a problem I'm seeing with tokenauth'ed RSS feeds on my site.

I was using simple access + tokenauth, and this combination had worked in the past. I created nodes that were viewable only by certain roles. I verified that users with the right role could indeed see those nodes when logged in to the site.

However, the nodes were not showing up in the tokenized versions of either my RSS feed (from Views) or my Atom feed (from the Atom module).

So far, I have:

• rebuilt content access permissions
• converted from Simple Access to Content Access
• rebuilt permissions again

In each instance, the tokenized RSS feeds don't contain the access-restricted nodes, even when testing with tokens from users who should be able to see the nodes—and CAN see them when they log in.

Here's the weird thing: the tokenized comment RSS feeds (from Comment RSS) do work properly.

I recognize that there's the distinct possibility that it's not tokenauth, but I'm hoping that someone reading here might have suggestions on what tests I could do to start nailing down where the problem actually lies. I'm bewildered to say the least—especially since multiple modules are involved—but glad that the default seems to be more security, not less.