Reddit would likely put a wall up to prevent non-developers from getting keys. I deal with enterprise applications that do that to prevent just that sort of thing. Basically you require developer registeration, and refuse any applicant that doesn’t show they are really a developer.