When reading from the OS Hub - what happens if API keys are invalid? How do we report this to the user effectively? Other areas could also do with better error handling for users.