Keys act as your church. Scope them tightly; revoke any time. Rate limit 600 req/min per key.