How to handle multiple environments?

Hello,
I'm wondering if others here can provide some advice / guidance on how to setup Sign In with Apple when using multiple environments.

We have three environments; Dev, Staging, and Production.

We have multiple iOS apps that will need to support Sign In with Apple.

It has been asked that, for security reasons, that there is a key for each of the environments.

I'm taking a guess that we'd need to create three ServicesIDs for the different environments, and then three keys for the different environments. Would this be a correct assumption, or is there a better way to handle this?


Following up a bit on my own question. It seems that you can only have two keys per Primary App ID. From this doc: https://help.apple.com/developer-account/?lang=en#/dev77c875b7e it indicates that the reason for the limit of two is that the idea is that if the single key is compromised then you generate an new one (the second key) and update whatever uses it, then you revoke the original key.

As for servicesIDs it seems you can have multiple, eg; one per environment, but I'm unsure if that is needed, and they'd all use the same single key.
How to handle multiple environments?
 
 
Q