This allows to limit IAM Token access to the channel and resource levels instead of the current `*` wildcard.