Valid cases were throwing an error

Some accepted parameters (site, id, and mid) were not in the list of
permitted parameters.

Also sourceRefKey was always required but there are some use cases that
do not require a refKey.