but then I guess the issue would be that you can't easily revoke access keys