Regenerate the API key of the authenticated user. The previous key stops working immediately, so this both revokes and reissues in one call.

user must be the authenticated user's own id; any other value answers 403, and an omitted value answers 400.

The response reports only the outcome. Call Retrieve API credentials afterwards to read the new key.