An engineer signs in to Vault using a corporate identity provider, while a batch process authenticates without a human browser session. What should guide their authentication methods?

1. Give both clients the initial root token
2. Use methods suited to each identity and workload environment
3. Require a browser-only login for every unattended task
4. Choose authentication solely by the shortest mount path