supports encoded apiKey