Has anyone ever tried to use RLS and have like an "API" key that users could be rate limited on. So it would make sure they had access based on an API key they sent with http request