Identity tokens from any running sandbox
A program with no RUNTIME_ID_TOKEN_REQUEST_* variables, such as one started before they were set or a sandbox kept from older guest software, now gets a token too: Sandbox.identityToken() (TypeScript 0.17.3), Python's Sandbox.identity_token() (0.16.2) and runtime sandboxes identity-token ask the sandbox's host for them, and the docs show the same with curl alone. See identity tokens.