It could be useful if the api-key could be set when doing a push of a new project.

Example with docatl:
docatl push docs.zip newproject 1.0.0 --api-key 1a558b3687abc41fb9dd2f1ec9459271

Then, no token claim is possible for "newproject" project and the token is the token set.