Create a Machine token

Requires an owner or admin. The secret is returned once. Its only authority is minting headless enrollment tickets for this Machine, through POST /v3/machines/enrollment-tickets (no Workspace or Machine needed) or POST .../machines/{machine}/enrollment-tickets; it cannot call any other endpoint. Workers it adds run Sessions with the permissions of the operating-system user who runs them. Tickets it mints are owned by the token creator and stop working if the creator is no longer an owner or admin.

_{Scope: devices:write}