3Commas debunks claims that employees stole users’ API keys