Router API Tokens

[PeteGoo]

To give some protection against someone spamming a router implementation it would be nice if there was a way of providing and revoking tokens that can be used in router query strings

1. User asks mmbot
   mmbot create api token for teamcity announcements
2. mmbot creates a token, adds it to the brain
3. User writes script with router implementation that starts with

robot.Router.Post("/mmbot/chatsecrets/{room}", context => {
    context.ValidateApiToken("teamcity announcements");
    var room = req.Params()["room"]
    var data = context.ReadBodyAsJson()
    var secret = data["secret"].ToString();

    robot.Speak(room, "I have a secret: " + secret);
  });

1. If the token is compromised the user can simply
   mmbot revoke api token teamcity announcements

The commands can be restricted to admins.

Thoughts?