Faisal provides a public RESTful API for his organization's data but wants to limit its use to trusted partners. He intends to use API keys. What else should he consider to limit the potential abuse of the service?

Group of answer choices

Limit request rates

Force HTTP$-$only requests

Avoid tokens due to bandwidth contraints

Blacklist HTTP methods such as GET, POST, and PUT