Kept in this tab only (sessionStorage) and sent as a bearer token.
The JSON body of POST /v1/jobs (the admin token must set "client").
The JSON body of POST /v1/clients. The token is shown once.