Might be convenient for some clients to use an API key instead of basic auth. We haven't yet implemented this for Revisit, but are planning to do so.