Properly handle invalid api keys.