Reimplement API key adding right revocation for users with too many permanent key failures