The Studio is a client like any other — it holds a short-lived key and reaches the engine only through the public API.