Malicious access to these tokens is malicious access to the service.