token

used to ensure idempotency (the token can only be used once) and may also ensure that the command is only accepted if the model has not been changed by someone else. The token may be generated by the client.