Right now, apis exist to evaluate sampling keys provided upstream. #10 looks at this closer to allow for provisioning new keys when you can read an incoming request.
There's a somewhat harder use case, which is when there was no incoming request. To start on this, we need information about the use cases (scheduled activity? client calls?) and if "request" parameters need to be read.
For example, lets say this is a local root. Would provisioning a key need to look at the client request that is about to be made? or would it be fine for it to base solely on out-of-band data?