Integration security

Least-privilege connection, token storage and revocation for external services.