Nope. if you pass via NGINX, you don’t need. But the Key will will expire in some moment.
We have the Slash API Key. I don’t know how this works in a dedicated server. Can you help @rarvikar ?
If you are using ACL you can expose it. What you can’t is left the login key available to anyone.
I have no idea, What I told you is a fact. Now how much it affects Cloud I don’t know.