As far as I can tell, you can't create new app passwords using one already. That seems to be the only limitation, though.