strip api keys