final report: explain API vs. KeyChain service