I don't know enough about bots to say. If you can safely use service role key (it can't be seen in the code by users) then that would work. Next would be having to generate a user for the bot and deal with signing/refreshing etc. There may be other ways using an extra row with a code you can include in the insert or with headers.