Mask API key in the request shown to users.