We should have some mechanism to recover an api key for a user if they forget it and communicate it to them.