Add secret_key for basic auth of requests

If the secret_key settings exists in the credentials.yml file, only
requests with an incorrect secret key will receive 403s and be ignored.