Support sub-doc updates

Still not following why we are checking in API keys? This just shouldn't be in the repo.