don't even create the api unless we have a secret created; some clean up