Is your feature request related to a problem? Please describe.
The Core BB has introduced Service Accounts to handle authorization between services: rokwire/core-building-block#306

Describe the solution you'd like
We should support service access tokens for internal APIs and deprecate internal API keys, which are less secure. These internal APIs should be deprecated, but still supported for backwards compatibility. The new APIs should be on the /bbs and /tps subrouters. We will also need to define some permissions for these endpoints.

You can use the new Surveys BB as a reference point for setting up the new BBs and TPS auth handlers; https://github.com/rokwire/surveys-building-block/blob/4b4a9d1aa34f7c4faaab7f1c80f45f8346f9ae4e/driver/web/auth.go#L51