Only allow users with view_shop_reports cap to generate API key. #857