Access Key should be shown as a password in the API-Explorer irrespective of the casing of the header key