Or just give them access to “tokens” as needed by business use-case? Doesn’t make sense to see this as a salary/benefit and then also expect them to use it for work related tasks.