OKAP (Open Key Access Protocol): Like OAuth, but for API Keys