You must add at least one restriction to generate a valid secured API key. If there are no restrictions, there’s no point in hiding the original API key since the generated secured API key has the same permissions and constraints.
You can find the list of possible restrictions.