GET http://runtime.internal/v1/identity/token returns 401 for a request token that is not the sandbox's current one
It previously returned 403. Read the current token from http://runtime.internal/v1/environment and retry. The JavaScript and Python SDKs already do this for both statuses.