We jump through a lot of hoops to cope with the fact that we do not have the stepdown token from the PrimaryOnlyService until run() is called, but we can potentially interact with our cancellation state before this. Some examples of functions that are needlessly complicated:

• _initCancelState
• _assertRecipientInitialized
• abort

We should modify CancelState such that it can be created without a stepdown token, and allow for attaching the stepdown token later. It should be able to handle abort signals prior to the stepdown token being attached. Callers that acquire tokens from the CancelState prior to the stepdown token being attached should be properly notified after the stepdown token is attached.