Tokens that can only access certain information, and/or only have some of read/write/delete perms

Idea is to let those with the scoped token read certain info, visibility of info different/separate from public privacy settings