Our Institution was part of CD2 Beta Phase, we used the identity service and was able to generate the API key and accessed the DB snapshot etc.

Now that CD2 is available as general availability, we want to generate an API key not associated with a canvas user account ( this user might be a canvas admin) since if this person leave institution then the risk of the API key getting revoked. With CD2 the API key has an expiry date with up to 1 year expiry, probably we need to create a new one after. 

So my question is how do we generate a Prod API key ( that need to be created every year) without tying to a Canvas real user? Trying to understand what is the best approach for this