rewrite account tests without knock

just stub out the request executor

it wasn’t obvious how to get nock.get and nock.post to accept a regexp
always requested encrypted secrets when getting api keys