I can imagine having a secrets store whose contents can be embedded into API calls, either in the URL or in a header, would be pretty useful.

And looking further ahead, having a way to authenticate users via Okta etc with the usual gubbins of groups and permissions and personal areas and sharing URLs would no doubt give you uptake in corporate areas.