A renewable service token reaches its maximum allowed lifetime. What should the client be prepared to do?

1. Keep renewing the same token indefinitely regardless of limits
2. Authenticate again to obtain a new token
3. Use its accessor as a permanent replacement token
4. Increase its own privileges without contacting Vault