API Keys are simple randomly generated strings bound to roles that grant access to resources.
Every API Key maps to attributes defining its validity and can be revoked at any time.
API Key can be passed in the X-API-Key HTTP Header and in the querystring &api_key=
Permission required: edit_backend_settings