Pattern one stores long-term tokens in Vault and has Vault issue short-term credentials to MCP, so that the entire agent process only uses short-lived credentials, thereby limiting the time window during which tokens can be intercepted and replayed.