In order to prevent damage in an event of a leakage of an API key, extra security measures are needed. By whitelisting specific IP addresses for a Port organization, you reduce the impact of a leakage of API keys for an organization. Adding whitelisting in an organization level, and in an API key level will help protect customers' data.