Service keys are used to sign and verify pieces of the authentication flow, as well as access the API. They are stored in the database, encrypted with a master key.