SideroLink Join Token rotation

[olehoglundrr]

Hi,
Looking the possibilities for rotating the Join token for the talos connection to Omni and have read through the documentation.
https://docs.siderolabs.com/omni/security-and-authentication/rotate-siderolink-join-token
However it's unclear to me how to enable unique ephemeral tokens for each machine.. I am not aware of having started Omni with the --join-token-mode=legacy; however I still get error on nodes with "Details: Does not have the node unique token" when trying to remove the old token. Is there a way to enable ephemeral tokens on existing nodes?

[olehoglundrr]

siderolabs/omni#1666