Use master keys for all operations and ignore token expiration.

Generate resource tokens with full permissions and long expiration times.

Create resource tokens with limited permissions and set appropriate expiration times based on the use case.

Do not use resource tokens; rely on IP filtering for security.