vendor prefix validation when generating api keys