#Generate a normal token 
vault token create

#Generate a wrapping token
vault token create -wrap-ttl=600

#Unwrap the actual token. If you try again the same command 2nd time it gives error that the 
#wrapping token is not valid as it can be done only once 
vault unwrap