an Entity references as follows:
The location of the API key. Valid values are 'query', 'header' or 'cookie'. Required for securitySchemeType 'apiKey'.