API keys are non-reversible