I don't fully get this The whole point of OAuth tokens is that they're not permanent access. Just revoke it if you need to.