refactor rio apps key config/access mechanism