Relay

Mint a pair code. Run it on the box. The controller token never leaves that machine.