API key permissions.