One filled navy button per view — it is the thing the page exists for. Secondary is outlined, tertiary is a ghost link-button. .btn-danger only for irreversible acts (revoke a key, delete an app) and always behind a confirm dialog.

Labels name the act, in the user's own words: Sleutel aanvragen, not Verzenden. Never a bare OK.