Is it possible to configure permissions to protect an accounts EOS balance with one key (held in cold storage) while allowing tokens that are getting airdropped to this account to be transferred out with another (hot) key?
Therefore allowing all tokens (excluding the main EOS balance) to be controlled by a separate key by default. Or do specific permissions need to be applied to the additional key on a case to case basis?