Specifies the type of token to create when using this role. Valid settings are 'client' and 'management'. Defaults to 'client'.