Securing non-human identities: automated revocation, OAuth, and scoped permissions https://blog.cloudflare.com/improved-developer-security/