Private Access Tokens can't be managed (rotation, revoking, etc.) using the UI at the moment, but they still can be created on your own! Means, when you create a PAT you have to reveal it directly after creation. It won't appear in the token management section later on, but it's still there.