zlacker

What prevents the client from receiving a valid token and then passing it off to another entity for that entity to use in their request? Could you have token farms that just generate tokens and provide them to "unhealthy" devices?