This PR disallows stale queries when deriving a Vault token. Allowing stale queries could result in the allocation not existing on the server that is servicing the request.