control minio token access