aaronpkthere's some work being done now to use "proof of possession" tokens (which require some additional secret or certificate that is used along with the token), but since Bearer tokens are everywhere, all these extensions are essentially extending Bearer tokens
