I see that the Azure Portal hits this endpoint to load my service's keys:
/subscriptions/<subscription>/resourcegroups/<resource-group>/providers/Microsoft.Search/searchServices/<search-service/listAdminKeys
/subscriptions/<subscription>/resourcegroups/<resource-group>/providers/Microsoft.Search/searchServices/<search-service>/listQueryKeys