IIUC, the UI will be seeing the public recaptcha key, so it doesn't need to be `globalAdminOnly: true`