Connected accounts

Read-only access is enough for an audit. Your token is encrypted with a key unique to your account and is never shown again — not to you, and not to your account manager.