Read-only API keys

Read-only keys are desired at both at the organization level, and at the partner level. It feels odd to use a read-write key to fetch the installer, and we are likely to develop reports at the partner level that will only read data, not write it.