cf : How to lock down an API token to only access what our application needs - #13 by AlexandreUnca
I do use okta skd.