i'm tired of seeing clients lose access to their data because some dev rotated a key and forgot the dashboard. i just use a
service account with a dedicated, non-expiring secret in the vault so it doesn't break every time someone updates the main auth module.
{"api_key": "sk_live_dashboard_readonly_9921","permissions": ["read:metrics", "read:revenue"],"expiry": null}does anyone actually use short-lived tokens for these internal views?