Rudder

It would be very very helpful to assign permissions to API keys.

• The most important piece would being able to create ones that only have readonly access.
• use normal user levels
• allow accepting nodes only
• allow access depending on origin of the caller (localhost, trusted networks, ...)

One very heartwarming bonus would be to be allowed to skip validation / change requests for API based accesses (by token)
Audit log doesn't need to be skippable ;)