Be able to set individual read/write permissions for individual API keys

e.g.

write-only for transactions & read-only for categories for an app that should only add transactions