I created a PR to allow API keys by default