yeah I like the idea of this being a separate "token" one could eventually revoke.