The error message that is displayed if an API request is make with a key that hasn't yet been validated displays the key itself.

It's better for us to sanitize the error message to prevent api keys from leaking into logs