Hi,
Droplet or other resources should have option to protect from APIs access. For example if i want to protect some droplet from external app which use my DO API key. I can filter which droplet can be read or write by APIs.
Main focus to prevent critical resources from unauthorized access or mistaken action.