adds api key requirement to client