2021-11-06 UTC
# 
[schmarty] The TokenAuth case you laid out makes some sense, but you don't need `resource` to be part of the spec for my resource server to offer your whatever endpoint a token that only has access to specific feeds or whatever