API keys

Keys are Fernet-encrypted server-side and never returned. Used by the /generate flow.