Read Only API Keys for Data Consumption

We have some systems that need to consume Workfront data. Currently the only way to give them access is to give them an admin API key that has Read/Write/Delete access. I would feel much better about allowing them to use the API if their API key was limited to Read Only.