"for rejecting api keys which might have a type" - assuming that is meant by to be "typo" - won't they get rejected anyway?

it's just an added benefit, I don't have to make a DB call to verify that :)