diff --git a/client/client.go b/client/client.go
index 71e94cf53..e691b972c 100644
--- a/client/client.go
+++ b/client/client.go
@@ -1795,7 +1795,7 @@ func (c *Client) deriveToken(alloc *structs.Allocation, taskNames []string, vcli
 		Tasks:    verifiedTasks,
 		QueryOptions: structs.QueryOptions{
 			Region:     c.Region(),
-			AllowStale: true,
+			AllowStale: false,
 		},
 	}