private void stripApiKey() {
        request.getHeaders().remove("X-API-Key"); //$NON-NLS-1$
        request.getQueryParams().remove("apikey"); //$NON-NLS-1$
    }
Strips the API key from the request (both the http headers and the query params).
gateway/engine/core/src/main/java/io/apiman/gateway/engine/impl/ApiRequestExecutorImpl.java