Hide api_key from /invoices post error to reduce risk of leaking