anchor.diff:      "cn_uuid": "15966912-8fad-41cd-bd82-abe6468354b5",
       "guid": "97496DD1C8F053DE7450CD854D9C95B4",
       "pin": "123456",
  -    "recovery_token": "jmzbhT2PXczgber9jyOSApRP337gkshM7EqK5gOhAcg=",
  +    "recovery_tokens": [{
  +        "created": 123456789,
  +        "token": "jmzbhT2PXczgber9jyOSApRP337gkshM7EqK5gOhAcg="
  +    }, {
  +        "created": 2233445566,
  +        "token": "QmUgc3VyZSB0byBkcmluayB5b3VyIG92YWx0aW5l"
  +    }],
       "pubkeys": {
          "9e": "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYA...",
          "9d": "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYA...",
  
positive.code: If the serial number is not part of an allowed range, a
  409 Conflict + InvalidArgument error is returned.
  
  In addition, a recovery key is generated by KBMAPI and stored as part of the
  token object.  This should be a random string of bytes generated by a random
  number generator suitable for cryptographic purposes.
  
  
negative.code: Response-Time: 42
  
  {
      "model": "Yubico Yubikey 4",
      "serial": 5213681,
      "cn_uuid": "15966912-8fad-41cd-bd82-abe6468354b5",
      "guid": "75CA077A14C5E45037D7A0740D5602A5",
      "pubkeys": {
          "9e": "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYA...",
          "9d": "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYA...",
          "9a": "ecdsa-sha2-nistp256 AAAAE2VjZHNhLXNoYTItbmlzdHAyNTYA..."
      },
      "recovery_tokens": [ {
          created: 1563348710384,
          token: 'cefb9c2001b535b697d5a13ba6855098e8c58feb800705092db061343bb7daa10e52a97ed30f2cf1'
      }]
  }
  
  ----
  
  Note that the location contains the guid of the _new_ token.
  