Token binding was the closest we had - still lets a compromised endpoint in the right position steal and use the tokens from that device, but it's at least not

Token binding was the closest we had - still lets a compromised endpoint in the right position steal and use the tokens from that device, but it's at least not persistent.