They have the supporting code for using a key, I'm assuming they don't have in band bruteforce since it doesn't usually make any sense at all