When I create API Key in my ArcGIS Online account, in "Referrers" paragraph I allow access from specific HTTP/HTTPS domains.
By enabling the domain, all folders and applications in it, can use this API Key.
I have not succeeded in limiting access to only specific folders and applications INSIDE the domain.
Am I missing something, or can API Key limit ONLY by domains?