Make API key private