When pushing the button, it is displaying the token ID, not the security code.
The Active Identity Token, 3/4 circle shaped tokens having (prefix AVT)
Short press and long press give you two different outputs - If you give a short press the security code is displayed. If you hold the button for a few seconds it flashes "V Sn" then the credential ID without the AVT prefix