Bearer credentials with enforced read, write, and administration scopes.
Choose the minimum permissions required by the application.