#2 merged, allowing access_token token types, which can be
generated from the Target Process UI and allow for independent
revocation, usage tracking, and a few other handy things. See
the Target Process API Client Authentication documentation for more.
Thanks to @davious for the contribution!