One shared password guards key management. Nobody needs to sign in to read the API reference or call an endpoint with their own key.