Using the Open API on the Gateway Network

I have 1 controller gateway and 15 edge (agent) gateways. I want to be able to create, modify, or disable device connections from the controller gateway on the edge gateways.

Now with the openapi this seems very possible. However, I just realized I will need to manually create individual api keys on each edge gateway, and I guess store them within a secret provider on the controller gateway.

Is the way I described the best way to go about this? It would be nice in the future to somehow bypass needing to create API keys to use the openapi on gateways either within the gateway network or configured as EAM agents (or at least have a setting you can enable to do that).