Currently API keys give read and write access, would prefer if I could set an API key as can only access specific asset layouts as read (and optionally write) only and make things more granular.