How would you handle access revocation?
With auth based access control it would be simple, otherwise key rotation would be necessary
Oddbean new post about login | logout