Why can't Administrators create API Tokens?

It makes no sense that Administrators cannot themselves create API Tokens (e.g for new API-only users in a read-only role). I have to either: Ask someone to demote my account (e.g. to the “manager...