Wahoo! API key management! To save others a couple of clicks:
https://developer.cisco.com/meraki/api-v1/generate-administered-identities-me-api-keys/
It would be nice if in the future an optional parameter was added, "Lifetime", so the key auto revokes after a period of time. The 5 minute propogation time could be an issue when dealing with short lived credentials, but I appreciate that one is probably harder to solve.
I am going to try this out using Amazon AWS Secrets manager, and having it use dynamicaly rotated keys. I guess I need the key rotation script to request the key, wait 5 minutes, and then update the secret.
Updates for switch templates - good. But there is still no way to actually apply the switch template to a switch ...