Switch from basic authentication to Token-based for REST/SOAP Fusion API

Since Oracle has announced to switch from basic authentication to token-based, we have several integrations that use basic authentication. We have five service accounts. So should we create 5 confidential apps for each service accounts? That way those 5 client ids can be assigned the same roles as those five service accounts. Or is it advisable to just create one confidential app and assign all 5 service account roles to one client id?