@sam What is your take on allowing User API Keys that only have the read scope attached, to be passed via URL params on GET requests?
Use case is allowing integrations like subscribing your Improved Bookmarks with Reminders in Google Calendar using User API keys.