value:  With an OAuth access token an adversary can use the user-granted REST API to perform functions such as email searching and contact enumeration. 
name: Use Alternate Authentication Material: Application Access Token