A security operator has a token accessor but not the token value. What is a legitimate use of the accessor?

1. Decrypt every secret previously read by the token
2. Recover the token's original value directly
3. Authenticate as the token by submitting its accessor
4. Look up or revoke the referenced token when authorized