API keys and crypto wallets should converge If we dropped bearer tokens in favor of signed messages, agents could sign requests using TEEs, agents never get access to a private key and accidentally leak it. Worst they can do is get phished and sign a bad message, but this is easily solvable from the gateway by providing strict permissioning on what can/can't be signed