What Happens to an Extendable Nomad Client Token When Its ACL Policy Is Revoked?
Nomad's ACL framework allows client tokens to be marked extendable so their TTL renews automatically when the token is used, supporting long-running allocations without manual rotation. When an operator revokes the underlying ACL policy to enforce least privilege, the documented behavior states that subsequent API calls are rejected; however, the exact inter