Adds AuthorizationHeader (with build() to construct the a new object with the field value).
Normalises to using "key" (from "secret").