Create and manage keys used to authenticate API requests.
Keys grant account access. Never expose them in client-side code.