The credentials between the API Manager and the API Gateway should not use the 'admin' user. There should be a separate user (pre-populated?) and a separate required role. Currently we have two roles:

apiuser
apiadmin

The API Gateway requires the apiadmin role. We should add a new role for this perhaps named:

apipublisher