Add support to determine API key permissions