Looking at API keys as a threat to your companies existence opens up the idea of using application identities and create temporary credentials based on "zero-trust" tech.