ExpectedCode tokens_owner_only

Only the owner manages tokens

API tokens open company data to other systems, so only the account owner can create or revoke them.