In a scoped api key i know i can add filters to lock the key to use those filters. I am planning on using the multi search so it goes in the body since i think it will be a long ish filterby. Can i add addtional filters in the search query that are not in the scoped api key or do they have to match identical? The scoped api part will enforce our secuirity needs, but if i wanted the user to be able to filter by say like color, i dont want to have to go encode the api key again.