Since you don't have yet a published roadmap yet, I'd like to ask your plans about this security feature:

Right now, when authorize a secret key it gets access to all endpoints, for example with "books" provides access to endpoint POST to create a new book, or GET to read all books inventory.

However, it is important for each secret key to select permissions only specific endpoints. Here are some examples with "users" table (instead of books):
- one secret key is allowed to list all users, but not create or edit users (like read permissions).
- one secret key is allowed to search for a specific user match, but not list all users (to verify password)
- one secret key is allowed to edit users, but not create new ones (like password reset)
- one secret key can create users (administrator).

I'm aware it's a big request that takes long...