Only allow a clientId or apiKey, never both.

When a Client ID is set, prefer it over an API key.  Setting both an API Key and a Client ID when loading the API is not allowed.