Control API key access