api keys suck