Why aren’t API keys all self-revokable ?
Perhaps I’m overlooking a basic issue with it, but I don’t think most keys being able to burn themselves would affect things.
An urgent notice from the Railway team
blog.railway.com/p/security-…
cc @SIGKITTEN @alistaiir perhaps you might be able to provide insight
if my OAI/ant API keys got leaked,
• I would want a provider to be able to revoke on my behalf
• Have agents be able to revoke them when they find them lying around on my machine in test scripts
what are the downsides












