There is the init with new secret method,

* that could get a param for the budget,

* then the apps could request only for a specific amount of funds.

Not more, not less. Then generated key would be non-useable. This way, the user do not have to keep in mind how much he shall allow for that specific app.

This way, we can generate on the fly throwable keypairs for apps.