I have deleted all api keys in my account and regenerated the primary key.... but a previously generated key still works, and i can turn it off.