Have the ability of generating named API keys that can be revoked individually (for different projects)
And also have the ability to scope the perms on the keys, for example only allow searching and getting info on books, or only allowing updating the journal, etc.