I don't actually understand your question. Use the bootstrap api key to only generate other keys and use those other keys in your app. Don't use bootstrap api keys directly. This is because the other generated keys can be revoked easily by the API.