How should route handlers treat missing API keys vs API key helper exceptions?