Remove the need for API keys by using OIDC

[devinmatte]

There is a way to use OIDC on every route without using API keys. The concept on API keys isn't needed with SSO if done properly

[liam-middlebrook]

That would work well for client-side API requests in browser. But I feel that it would add complication to or potentially remove, the ability for commandline based clients, or other clients that do not have a web session associated.