In order to provide dashboard access to more people, it seems secure to introduce a `read-only` masterKey. When using this key, in the `X-Parse-Master-Key` header, the auth would be marked as read-only and throw errors when trying to run `any` write operation.