request and response. This makes it far easier to properly check validity elsewhere in Vault because we simply replace the request client token with the inner value.