I\'m setting up an application that uses an API Key to identify other users (other applications) Now I wondered if it is common to store that API key (or a hash) with the object