User API keys: duplicate client_id will lead to internal server error

It should be globally unique.