Command luci_machine_tokend runs on all machines via cron.

It wakes up each ~10 min, checks whether it needs to refresh existing machine token, and refreshes it if necessary.

It also dumps information about its run into a status file (as JSON), that can be picked up sysmon and transformed into ts_mon metrics (most important one being "time since last successful token refresh").