When entering an api key also check the key.. i.e. "tick" if it is valid. This requires some js and a wp-api endpoint