Don't allow requests with No Key to use existing session with valid API Key lets say, I created a desktop client, which has api-key embedded, one of the user use it through public proxy, and the proxy ip will get 10k limit right? and other people who use that proxy with no key will continue to use my key for the whole day, isn't? or Am I missing something? or I should never embed my API Key in desktop client application binaries?