docs: @Get("/tokens")
      public CompletableFuture<Collection<Token>> listTokens(User loginUser) {
          if (loginUser.isAdmin()) {
              return mds.getTokens()
                        .thenApply(tokens -> tokens.appIds().values());
          } else {
              return mds.getTokens()
                        .thenApply(Tokens::withoutSecret)
                        .thenApply(tokens -> tokens.appIds().values());
          }
      }