pub fn validate_api_key_format(key: &str) -> SecurityResult<()>
Validate that a string looks like a valid API key