I can limit item access for developer credentials to specific items, and those items are the only non-public items that can be viewed with those credentials. But once I try to add editing privileges to the credentials (or any general privileges), the credentials change from "standard" to "personal", and they can now do everything I can do on every item I have access to, despite any item access settings in place.
Is there any way to create and configure developer credentials (OAuth2 or API key) to, for instance, be able to edit layers in a single item, but not delete that item, publish new content, or view/edit any other non-public items in my ArcGIS Online portal?