make sure we dont allow deleted api keys