[Klonoar]

You can also opt to use API keys from Apple Connect in CI, which is what I do - less of a headache with Keychain.app.