Instead of associating api keys with users, i want them to be specific to a project What is the best way to acheive this?