SMTP username.
SHA-256 hashed before storage.
For HTTP; hashed before storage.
Reference to api_keys.id.
Comma-separated IPs or *.
Comma-separated domains or *.
Incoming auth created or updated.