add allowed_ips to api_keys

update annotations
correct import script
FEATURE: allow restricting API keys to a particular range