Is it better to use an api key of "1234" and a secret of "6789" to highlight the difference between "only api key" and "both"? If so, you could also add a note saying that "of course real api keys and api secrets look like this..."