I think this is a new section under Managing Data called Accessing TOM data through the REST API
Include:

• Circumstances when this is useful
• DRF intro with pointer to DRF docs
• Show user Profile card with API token
• Discuss implications (treat like password; what reset means)
• Show curl example (using API token)
• Show python requests example (using API token)