Fine grained permissions for Personal Access Tokens

Expected Results
A user should be able to restrict permissions of the token while generating it. For example allow the user to generate a token which:

• is read-write,
• is read-only,
  or going further:
• token which has permissions for a specific project (e.g. fetching issues of the project, creating a ticket in the project, etc),

Actual Results
Currently all generated tokens have the exact set of permissions as the user has.