Since tokens are associated to the email address, updating the email address silently renders all existing tokens (including API Keys) useless.