Distinguish between api key provided or not and returning 401 or 403 respectively