A Lite Agent should't have ability to create an authtoken for Zoho Desk, but they can. Please disable this option

When they click there, they get:

Clicking "Generate Authtoken" they get an actual Authtoken:

If afraid that this will now give a Lite Agent an opportunity to pull these tickets elsewhere. Can you please disable this option for Lite Agents?