We shouldn't need separate tokens for each kind of site. The current oauth we have in private should suffice for all of these scenarios.