require key authentication for purge_by_key

Nope. This change is isolated to purging via surrogate key.