Protect API from unauthorized with API keys and client certificate in API Management