Allow users to generate via their OAuth2 Personal Access Tokens short-lived signed JWTs that enable granular access to a specific resource. This is useful for:
- Ad-hoc generation of "secret" links to private resources, like e.g. closed-access files
- Integration with 3rd-party systems that use your platform to store records, and don't want to proxy all the protected resources via their system