#2 Use existing ApiKey object instead of getting from parameters