- API keys should have deployment scoping (if they already do) it should be possible to assign this from the UI. - Newly created keys on UI also show as expired.