should have a way to store authKey for API

So you'll give access to your ctxification, but you don't want to give away your apiKey, so I'll come up with some way to look that up with my loadObject ... can I assume one key per 'app' ? not per subdomain... maybe it will be the same as figname...