So what then is the point of different roles having the potential to be Read Only or Read/Write in the "Access API" section? It looks like you can give users different API permissions, but this doesn't actually do anything - if all users have the same User ID and Encryption Key, the Marketo Admin has the same SOAP API permissions as the restricted, "API only" user.