- Set up tokens or something we clients can't trivially
impersonate servers