title: Can I have GCS private isolated buckets with a unique api key per bucket?
body: <p>I'd like to give to each of my customers access to their own bucket under my GCS enabled app. </p>
  
  <p>I also need to make sure that a user's bucket is safe from other users' actions. </p>
  
  <p>Last but not least, the customer will be a client application, so the whole process needs to be done transparently without asking the user to login.</p>
  
  <p><strong>If I apply an ACL on each bucket, granting access only to the user I want, can I create an API key only for that bucket and hand that API key to the client app to perform GCS API calls?</strong></p>