Add the ability to generate keys with different privileges (eg. read only, get methods).
I like to author applications and grant them only the privileges they need. This can be handled with business logic, but providing more flexibility in key generation can help support this and other workflows.