API Token Scopes

[MinusGix]

It would be nice to have the ability to create sub-tokens, which let you toggle whether certain actions are allowed.
Ex:

• Allow publishing new plugins
• Allow updating crates
• Allow yanking crate versions
• Allow the previous two operations on specific plugins.

This would allow use-cases like giving another user the ability to update your theme. Or, for multiple people working on some more complex extension, allow them to share a key to update the plugin without being able to do anything else for the account.