was hoping to automate token generation for service accounts/roles post-refresh. will need to manage those through the UI instead. a service user/role can only

issuetoken

if it knows it's password.