When API keys were generated for the first time, the permissions weren’t set, which required an additional save before they were set. This commit fixes this to set `read` permissions by default when initially generating API keys. Part of #4055
Part of #4055