api keys 8 chars instead of 32