Always have GR generate the access_token
Only root systems can create new systems