Caps on the Key Row

A cap on an API key is set from the key row itself, and the dialog that mints a key offers one under the secret. No key id is typed. What the cap does is unchanged: armed on the organization or on one key, it is enforced in the request path.