Create and manage API Keys, configure permission scopes and expiration, and implement the principle of least privilege