working on getting nsecbunker to create one-time-use tokens
you'll enter the generated token on a client and have a policy automatically apply to it the permissions the administrator has granted
here, a policy that just allows using DMs, but can't do anything else:
https://nostr.build/av/1acd661c0a267f3c859ce2cf1e9deadc1a4f5c2479f362d44a315df01d688dea.mov