Is there a more secure way than Personal Access Token to authenticate with Ory Admin API? Or at-least limit which source IPs can make calls with the PAT etc. Ory creating / storing PAT means we can not use some HSM to Authenticate against Ory Admin API which would be a more secure option for us and is already supported by Ory Hydra (private-key-jwt)