diff --git a/vault/token_store.go b/vault/token_store.go
index 2567acda2..c9695faed 100644
--- a/vault/token_store.go
+++ b/vault/token_store.go
@@ -83,6 +83,10 @@ func NewTokenStore(c *Core) (*TokenStore, error) {
 			Root: []string{
 				"revoke-prefix/*",
 			},
+
+			Unauthenticated: []string{
+				"lookup-self",
+			},
 		},
 
 		Paths: []*framework.Path{