implement getScopedKey (and tests)

This PR implements scoped keys (as documented at https://keen.io/docs/security/#scoped-key) so you can show analytics to your users without revealing your API key.