Right now, we use condor_vault_storer as the method to get tokens for the various accounts. However, there are some users now who use the service that don't need Condor to be involved at all. We should implement direct htgettoken calls, and then have it be a configuration option if that particular token should use htgettoken or condor_vault_storer (the default can be the latter).