Compare the API Key mask, its requirement and the proposed requirement, fix #1