When rotating an API key in a production environment, we need the new key, and the old key. Once everything works, we disable the old key. Currently only one API key is available, with a lot of permissions.