initSecureFields → fields rendered in iframes → submit → vault token returned. No session required — operates at tenant level.
initSecureFields