https://symfony.com/doc/3.4/security/api_key_authentication.html https://symfony.com/doc/3.4/security/guard_authentication.html We need to see whether this actually simplifies things, and whether this works well with FOSRestBundle.