require key authentication for purge_by_key