Changed "client" to "apiKey" in validation endpoint.