Certificates belonging to multiple users in a single token (USB)

Is it ok to allow copying of certificates belonging to multiple users onto the same token or USB? Should copy into token be restricted to certificates belonging to the same user only?