Accept key/secret in headers.