Handle cases where the token's scopes or expiry period has changed

[wbh1]

If a token's scopes or expiry period changes, it won't take effect until the next normally scheduled rotation of the token. We should probably immediately recreate the token if scopes or validity period changes (but still keep around the old token to expire on its own).

[cxdy]

Do you mean within latr? The only thing on the API side you can change about a token is the label. If you update the scopes or expiry in the latr config, you would need to re-create the token.

[wbh1]

Do you mean within latr? The only thing on the API side you can change about a token is the label. If you update the scopes or expiry in the latr config, you would need to re-create the token.

yep! that's exactly what I meant