Access tokens are used by the Keswick host or multiple Keswick hoststo provide read-only access to the Git repository where the desired state configuration for the host and workloads are described.