We can currently block or allow users from issuing themselves bearer tokens in the Developer Center based on squads/roles in the Permissions app. With the advent of read-only bearer tokens in addition to admin tokens, we would really appreciate the ability to block or allow issuing of admin tokens separately from read-only tokens.