I'm creating a performance monitoring tool for OpenStack. What I'm doing right now is, collecting data from OpenStack every 5min once, through RESTAPI, by creating authentication token. But not revoking the token I have created. Is this correct approach? Is there any restriction on creating no.of tokens? What if a token created and not revoked? Will this cause any problem? Please suggest, the best practice on creating authentication token!