What occurs during a Layer 2 inter-controller roam?

A new security context is applied for each controller to which the client is associated, but the IP address remains the same.

The client must be associated to a new controller where a new IP address and security context are applied.

The client retains the same IP address and security context.

The client is marked as foreign in the database of each new controller to which it is connected.