This idea came after trying to use Dapr using Postman's mock server feature and realized it uses x-api-key to authenticate API calls. UPDATE: a better way to solve this with little code is to add support via an env variable and K8s annotation instead - same as it was done for APP_A...