Add configurable access mask for API key