Authenticates clients of the LLM Gateway by their api key and enforces a token limit per user, with the users configured inline and their usage kept in memory. A request whose key is unknown is rejected; a user who has spent the tokens of the current period is rejected until the period resets. Usage counts are lost on restart, so this fits a small, fixed set of clients rather than a large or changing one. See tutorials/llm-gateway/openai/20-Sharing-API-Keys.yaml.
The users the gateway accepts, each with the api key it authenticates by and its token limit. A user without an api key is a configuration error and fails the startup.