- allow group admins to manage api keys of their group
- when adding an authkey from the user view, don't list every user in the dropdown, focus on the selected user
- users can have multiple keys
- keys are hashed with bcrypt
- each key can have its own expiration
- each key can have a contextual comment
- authentication via API requests happens with the Authorization header
iglocska