For security reasons api keys should not be that open.
Whitelist is a must feature for space security, if people get fired we are supposed to rotate all keys from all apps which is totally inconvenient and it is easier just to remove VPN access from the person.