Triggering a backup via admin API causes the api_key to become only valid for system user

It’s likely not urgent to fix (I only came across it by accident), but it concern me that the codepath has an unintended side effect of modifying the API key used to access it.