handle auth throttling
make the keys expire