Application specific drive credentials and permissions

I propose the following:

- There are apparently already application specific credentials for drive or other calendar.

I would like to have them for drive with the added case that credentials should have associated permissions, e.g. restricted to certain folders, restricted to write-only etc.

Use case: Provide Sync-Services or other non-trustworthy endpoints (imagine also: Printer in a more open space) with throw-away credentials and ensure that even in case of abuse/capture of those credentials they are worthless due to them only being able to access a very restricted subset of drive or not even that in cases of write-only credentials creating the proverbial mailbox.