So what matters with SBTs is that credentials are tied to a specific individual but the token itself should be free to move around using transfers if so needed.