We've been using merchant generated api tokens to pull sales data from our clovers, which we then use for our own internal analytics dashboards. We have avoided the OAuth flow because we do not want to make our app public. How should we go about continuing to use the REST api without making a publicly installable web app?