Protect the route with a custom query key (like on cron.php)

As an administrator I want to keep the route away from bots and configure a custom key through a config form.
If the key is enabled in config but not passed on url query, the response would be 403