Leave it up to the sender to check for a valid api key.
Fix spec