We currently use the long-lived user keys, but are working on short-lived role keys as well as support with Okta.