Public capability used to open an Inttegro file link.
Both the link id and its token are required. Opening a link intentionally omits the
application's secret key, which allows the capability to be handed to its intended recipient.
Treat the token as sensitive until the link expires or is revoked.