The design implications of ApiKey vs. List

When building a system with API Keys, you need to consider a seemingly trivial design question. Consider the two class diagram options on the right. We have a user's account and we need to allow access to a certain resource. We do that using an API Key.