persistent (boolean, required)
Whether this token can subsequently to its grant be revoked from the UI
roles (array[string])
The additional services for which this enrollment token applies (empty if not specified, ie system services only)
validity_in_seconds (integer as int32)
The time in seconds for which this token is valid (defaults to 1 hour). Currently this can only be set for ephemeral (persistent: false) tokens.