fix(client): keep token exchange bound per client across copy() (#388)