The dash also only gets the token in the api response, and somehow generates a Access Key Secret using it (I assume)