Make more OAuth2.0 APIv3 requirement more prominent

* Also mention that we no longer issue new keys for APIv2.