<VerifyAPIKey continueOnError="false" enabled="true" name="VA-Key">
  <DisplayName>VA-Key</DisplayName>
  <Properties/>
  <APIKey ref="request.header.x-apikey"/>
</VerifyAPIKey>