Any stored procedures which return customer data should require either the customer's API key or an admin API key.