can either `shared_username` or `shared_api_key` be None but not the other? if not, the test is too long, just checking for one of them will do.