Is this a true statement about an Okta API token?