Clients that know the LSPS2OpeningFeeParams can bypass the token requirement in LSPS2 #4037
Description
I have no idea why the spec requires the token only in GetInfo and not in BuyRequest, but we need to ignore the spec and do something sensible here. We should require the token in BuyRequest and bubble that up to the driver via the event as well so that it can't be bypassed by simply skipping GetInfo and sending a BuyRequest right away.