But it looks like the rest service is really only built for the service account/role to request a new token