ApiKey and ApiSecret sets set to private

They were set to internal in a previous commit, but it makes more sense
to use private because only code in the same class needs to use it.
Related to issue #15