code: func (s *APIServer) getTokens(auth ClientI, w http.ResponseWriter, r *http.Request, p httprouter.Params, version string) (interface{}, error) {
  	tokens, err := auth.GetTokens()
  	if err != nil {
  		return nil, trace.Wrap(err)
  	}
  	return services.ProvisionTokensToV1(tokens), nil
  }
docs: // getTokens returns a list of active provisioning tokens. expired (inactive) tokens are not returned