The Nomad secret backend for Vault generates Nomad API tokens dynamically based on pre-existing Nomad ACL policies.