Need the ability to generate an access token programmatically for specific users (as an admin) but would be useful too for an user to change its own token

My current workaround is a POST to /user/johndoe/descriptorByName/jenkins.security.ApiTokenProperty/changeToken and parse the script header in the response