Ah, I gotcha. Since Pulumi programs can do anything a real program could do, I suspect it's possible to do the equivalent of listKeys from inside of a program, but this would be specific to your program. We have the ability to give built-in resource functions that work across languages which this seems like a great candidate for (e.g., see https://docs.pulumi.com/reference/pkg/nodejs/@pulumi/azure/dns/#getZone).