Thanks, You can specify a ACL tag to the key to restrict it's access into the rest of your network. I will hopefully have a CLI launched this weekend too