Api keys and similar are better for services that are long running and should not go down: websites, backends that require access to other services.