Where is the Allow_user_api_key setting enabled?

I see. Have you seen this?