A team finishes initial Vault setup and begins routine application use. What should it do with the initial root token?

1. Publish it to developers as a shared convenience credential
2. Embed it in every application image
3. Use it only as an unseal key share
4. Revoke it after configuring appropriate administrative and authentication paths