@Override
        public boolean verify(final String apiKeyStr, final String hash) {
            if (apiKeyStr == null) {
                return false;
            } else {
                return BCrypt.checkpw(apiKeyStr, hash);
            }
        }
Thrown when an API key is created that has the same prefix + hash as another key.
stroom-security/stroom-security-impl/src/main/java/stroom/security/impl/apikey/ApiKeyService.java