Vault tokens derived from WI are never revoked when task is stopped

[skoppe]

In #19030 it was reported that Consul token derived from WI are never revoked, and that a fix should also fix it for Vault token.

In #19034 the Consul token are revoked, however, I don't see code for revoking Vault tokens.

Since revoking a Vault Token also removes any child tokens, it seems useful to have.

[jrasell]

Hi @skoppe and thanks for raising this issue. We do not currently revoke tokens and rely on their associated TTLs to perform this. However, performing revocation via the API on task stop/destroy would certainly be beneficial and tighten up our implementation. I'll therefore move this onto our backlog.