A deployment system must hand a sensitive response to another process without directly exposing it in the handoff channel. Which feature supports a short-lived, single-use handoff?

1. A permanent root token included alongside the response
2. Response wrapping
3. A token accessor used as a decryption key
4. The audit device's filename