Storage of API Key

[ryanwoconnor]

We need to think through how we are going to store the API Key. In a shared environment, all admins will currently have access to the API Key that is used. For some circumstances this may be OK, for others this could be bad.

i.e. I wouldn't put my own API Key for my own personal Google Drive on a shared instance. A non-profit may be alright with putting an API Key on their instance if it only has access to data in a shared mailbox such as "mynonprofit@gmail.com".

Keep in mind the API is stored using the Splunk password store currently. The concern though is that all admins can also access the password store.