Based on all the “tinkering” I have done with the “unique API key” method so far I find it to be a much more effective solution, but it is not an easy one. I think I already have 4 different docs written up and now of them looks simple and straightforward 
I will try and simplify the whole process and write up a doc on it, but I doubt I’ll be done with it in the next cpl of days. With work and life stuff … earliest I’d be able to provide a doc for testing and validation would be friday