Comment by zepton

The Stack Exchange API used to revoke API keys sent over HTTP (and return an error message), which is my favorite way to handle this.