also thinking I should make project-specific keys. That way confined users can configure default settings & one can have different views for different projects 
ideally there would also be a way to store persistent settings on the user-level. definitely could do it by storing keys on the authenticated TLS cert. will have to explore more creative approaches for the other providers.