use explicit key/secret