diff --git a/services/comms/oneoffs/synapse-admin-ensure-job.yaml b/services/comms/oneoffs/synapse-admin-ensure-job.yaml
index 841b1ca..3241e35 100644
--- a/services/comms/oneoffs/synapse-admin-ensure-job.yaml
+++ b/services/comms/oneoffs/synapse-admin-ensure-job.yaml
@@ -1,12 +1,12 @@
 # services/comms/oneoffs/synapse-admin-ensure-job.yaml
-# One-off job for comms/synapse-admin-ensure-10.
-# Purpose: synapse admin ensure 10 (see container args/env in this file).
+# One-off job for comms/synapse-admin-ensure-11.
+# Purpose: synapse admin ensure 11 (see container args/env in this file).
 # Run by setting spec.suspend to false, reconcile, then set it back to true.
 # Safe to delete the finished Job/pod; it should not run continuously.
 apiVersion: batch/v1
 kind: Job
 metadata:
-  name: synapse-admin-ensure-10
+  name: synapse-admin-ensure-11
   namespace: comms
 spec:
   suspend: false
@@ -242,7 +242,7 @@ spec:
                   user=PGUSER,
                   password=pg_password,
               )
-              token_value = secrets.token_urlsafe(32)
+              token_value = f"syt_{secrets.token_urlsafe(32)}"
               device_id = "ariadne-admin"
               try:
                   with conn: