One thing I noticed during integration of MDL-75268 is that we fetch the api key on every page load via WS. We should try and store this in local storage and defer to the WS if it was not found in storage.

The issue then becomes clearing the cache when the key is changed in the UI but that should be possible by doing something like purging the JS cache in that instance.