decrypt api key secret and store it in the cache

when called from Application.getApiKey

need to implement under Account.getApiKeys as well