Add in a check for the API Key before pop'ing off.

 This logic is only different *iff* we're running without Locksmith.