private method to build apikeys string