New session hosts must register with the intended host pool. How should the registration material be handled?

1. Publish the registration token in a public image description
2. Assume installing an unrelated application automatically registers the host
3. Reuse an expired token indefinitely
4. Use the correct current registration mechanism and protect time-limited registration tokens