<VerifyAPIKey name="VA-header">
    <APIKey ref="request.header.X-APIKey"/>
</VerifyAPIKey>
