The apikey in case you are exposing Kong's admin via a "loop-back" API. See here for details.