Stored only in this browser. Sent as the
x-api-key header.