Is it possible for users to create/revoke personal access tokens?

I’m not having a lot of luck finding answers online. Are there APIs that Users (not Keycloak administrators) can use to create a revokable personal access token?

I’m an also looking for how to do this.

Me too. This seems like an important feature to allow logged in users to use their NBI with curl, without having to create a dedicated client or use an unsecure password flow