Having started to review some of our filer automation scripts, I'm starting to look in a bit more detail at the API.

My first conclusion is - the perl SDK doesn't actually seem to do anything much - it seems to be a reimplementation of LWP and and XML Parser. 

Given I have LWP and XML::Twig installed, and am making API calls just fine, is there anything I'm missing here? 

Aside from that though - authentication types. 

I currently use ssh public-private key pairs, in a trusted account on a management station to enable 'doing stuff' with filers. It _looks_ like my only option with the API is to create a designated service account, and assign permissions... and then embed a username and password in a script somewhere.
That just doesn't sit well with me - I like what ssh-agent will do in 'unlocking' key files, and I don't like embedding (potentially privileged) usernames and passwords ... anywhere.

Does anyone have a better solution than a couple of designated API users (privileged and read only) with a file somewhere embedding their username and password? 

Does anyone have a better approach?