enable no-api key sources in defaults