Hired a freelancer to do a few scripts for me including listing item insertion. I don't need production code from him. He can do a test insertion and that's good enough for me. Can I share my 3 sandbox keys? What about a token? If I get an OAuth token, but only give him sandbox keys, is that safe? Then maybe reset the keys and token when he's done? What's the safest thing to do.