Does it need to be anonymous? IIRC the client will send the application key in their requests.