and from my perspective, if there was a way to avoid the need for a consistency token, google and authzed wouldn't have used it - it's kinda inherent to the problem