Not a bad idea. reduces the "blast radius" of these api keys. People leak them rampantly.