Proper token management for bots

At least for verified bots, there should be an option to create multiple active tokens at once with:  

• Custom scopes per token (gateway, http, oauth scopes etc)
• Custom expiry times
• IP restrictions
• Audit logs

Also would be nice to have an API for creating/revoking these tokens