log scope of api key used

support multiple api keys for scoped authentication and key rotation