The iOS agent uses the opentelemetry Intake support of the APM Server to send apm events, rather than the RUM intake. This raises some questions related to auth handling and rate limiting:

• Whenever apm-sever.api_key.enabled: true or an apm-server.secret_token is configured, a valid API Key or secret token needs to be sent with the request, also when sent via opentelemetry intake. Investigate how to handle this for requests from the iOS intake.

• Investigate whether some similar rate limiting as currently enabled for RUM endpoints should be enabled for iOS requests.