API key monitoring and auditing