What else can be used instead of an API Key as is implied by OWASP? | Heykuki News