Returns the app's keys, oldest first. Non-revoked only by default; pass include_revoked=true to include revoked keys. An app can hold several keys at once (create a new key, roll it out, then revoke the old one for zero-downtime rotation). Secrets are never included in this response. When true, include revoked keys in the response. The app's keys, oldest first. Revoked keys are excluded unless include_revoked=true. The public app key clients use to connect. The key secret, used for server-side request signing. Returned only when the key is created, and never shown again — store it securely. If lost, create a new key and revoke this one. When the key was revoked, or null if still active.