Create and Apply Policies for API Key and Token