Do not deliver API key on settings API unless user has admin rights.