clarify docs: single-use tokens are consumed by failure too