We are using access_keys to access repo in Bitbucket on our Jenkins CI server to build projects.
Access key for a project is read-only, but it it would have be nice to be able to push a build tag after successful build.