Authorization HTTP header, raw, with no scheme in front of them:
rs_test_ operate against the test environment; rs_live_ ones against production.
The same key serves both version 2 and the swap operations.
A key reaches only the organizations Fourvenues authorized on it. Asking for one outside that set answers
403 ORGANIZATION_NOT_ALLOWED, and an event outside it answers 404, so an organization you cannot see is
indistinguishable from one that does not exist. List reseller organizations
tells you which ones your key covers at any moment, including the ones activated after it was issued.