- Long-lived credentials (incl. API tokens) are a security risk. - Twilio CLI should support oAuth authentication.