WC API: can generate API keys for different user than the one that is making request