Each gallery is one bucket. Keys are stored only on this device, unless you turn on sync. Use an application key restricted to that one bucket.

Sync galleries