ultimately, the user has to protect their own login secret. everything else is just skateboard-rake.jpg

I'd create a small app on a server I own and host which has access to the keys and can create notes and then expose that through a traditional username/password authentication to any employees who need to create content for the account. There probably are smarter ways lol but that's what would be e...