Using the username and password is not very secure, as any leak grants full access to the account. Any plans of implementing granular API keys?