Implement API keys that can perform all API actions

These could be added and configured with permissions, similar to user groups permissions