use hex instead of base64 encoding for API keys