Thank you @_j , Completely forgot about this.
@piaumut Take it as a lesson learned. Providing the client with the API key is a mistake. Encrypted or not.
