there is a huge issue in the web with api keys, nobody may ever see ^^ but for real, those api keys expire in, i guess some hours and what damage could be done ? who is even interested in fetching my api for some requests ? but i get it, better safe than sorry