API Keys and Key Permissions (legacy)