The internal token api in Central issues ephemeral tokens for Sensor to facilitate the proxy. The current implementation stores the ephemeral RBAC resources referenced by the internal tokens in the database. This was done to simplify the implementation because it allowed reusing much of the existing RBAC functionality under the hood. However, this has a few drawbacks:

• Additional database calls
• Requiring clean up of expired resources

This task is about cleaning up the design and implementation of the ephemeral tokens and related rbac resources.