reverting api key generation to previous strategy (which failed on initial deployment, but may be necessary now…)