I’d like to add ‘Avoid any permission model for API keys’. Even with multiple keys, if they are all god-mode it’s difficult for a central operations team to gi

I’d like to add ‘Avoid any permission model for API keys’. Even with multiple keys, if they are all god-mode it’s difficult for a central operations team to give internal users API access without risking unauthorized changes or audit findings in regulated environments.