API keys & agent keysCreate scoped keys for REST access, rotate them before they expire, and revoke them.